SPLK-1005 Splunk Exam Questions and Free Practice Test

Which type of metadata can be used to identify the origin of the data?

A. Source

B. Source type

C. Host

D. Index

Correct Answer:C

What is the name of the configuration file where you can invoke data transformations by associating them with a host, source, or source type?

A. limits.conf

B. props.conf

C. inputs.conf

D. transforms.conf

Correct Answer:B

Which Splunk add-on simplifies the process of getting data into Splunk Cloud Platform from Windows Event Log channels?

A. Splunk Add-on for Windows

B. Splunk Add-on for Infrastructure

C. Splunk Add-on for Active Directory

D. Splunk Add-on for DNS

Correct Answer:A

What is the default value of the LINE_BREAKER setting that splits the incoming stream of data into separate lines?

A. Any sequence of newlines and carriage returns

B. Any sequence of spaces and tabs

C. Any sequence of punctuation marks

D. Any sequence of alphanumeric characters

Correct Answer:A

Which feature of forwarders can prevent data loss in case of network failure or congestion?

A. Data compression

B. SSL security

C. Configurable buffering

D. Persistent queues

Correct Answer:D

What are the two options for Dynamic Data Storage in Splunk Cloud that allow you to move expired data from indexes to another storage location?

A. Splunk Archive and Self Storage

B. Splunk Backup and Self Storage

C. Splunk Archive and Splunk Backup

D. Self Storage and Splunk Restore

Correct Answer:A

START SPLK-1005 EXAM