SPLK-1003 Practice Test

SPLK-1003 Practice Test practice questions, page 6 of 9, with answer review and explanations.

Question 26

What is the correct order of steps in Duo Multifactor Authentication?

  1. 1. Request Login 2. Connect to SAML server 3. Duo MFA 4. Create User session 5. Authentication Granted 6. Log into Splunk
  2. 1. Request Login 2. Duo MFA 3. Authentication Granted 4. Connect to SAML server 5. Log into Splunk 6. Create User session
  3. 1. Request Login 2. Check authentication / group mapping 3. Authentication Granted 4. Duo MFA 5. Create User session 6. Log into Splunk
  4. 1. Request Login 2. Duo MFA 3. Check authentication / group mapping 4. Create User session 5. Authentication Granted 6. Log into Splunk

Question 27

Where can scripts for scripted inputs reside on the host file system? (Choose all that apply.)

  1. $SPLUNK_HOME/bin/scripts
  2. $SPLUNK_HOME/etc/apps/bin
  3. $SPLUNK_HOME/etc/system/bin
  4. $SPLUNK_HOME/etc/apps/<your_app>/bin

Question 28

How does the Monitoring Console monitor forwarders?

  1. By pulling internal logs from forwarders.
  2. By using the forwarder monitoring add-on.
  3. With internal logs forwarded by forwarders.
  4. With internal logs forwarded by deployment server.

Question 29

What options are available when creating custom roles? (Choose all that apply.)

  1. Restrict search terms.
  2. Whitelist search terms.
  3. Limit the number of concurrent search jobs.
  4. Allow or restrict indexes that can be searched.

Question 30

Which of the following are supported options when configuring optional network inputs?

  1. Metadata override, sender filtering options, network input queues (quantum queues)
  2. Metadata override, sender filtering options, network input queues (memory/persistent queues)
  3. Filename override, sender filtering options, network output queues (memory/persistent queues)
  4. Metadata override, receiver filtering options, network input queues (memory/persistent queues)