SPLK-1005 Splunk Exam Questions and Free Practice Test

Which setting in inputs.conf can be used to specify the interval at which the script runs for a scripted input?

A. interval

B. frequency

C. schedule

D. cron

Correct Answer:A

What is the main advantage of managed Splunk Cloud over self-service Splunk Cloud in terms of scalability and reliability?

A. Managed Splunk Cloud provides a single-instance environment that can scale up to 10TB/day and offers a 100% uptime SLA.

B. Managed Splunk Cloud provides a clustered environment that can scale up to 10TB/day and offers a 100% uptime SLA.

C. Managed Splunk Cloud provides a single-instance environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

D. Managed Splunk Cloud provides a clustered environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

Correct Answer:B

Which feature allows a heavy forwarder to route data to different indexers based on criteria such as source, sourcetype, or host?

A. Data cloning

B. Data filtering

C. Data sampling

D. Data masking

Correct Answer:A

Which option in Splunk web can be used to access the Guided Data On-boarding feature?

A. Add data

B. Data inputs

C. Data summary

D. Data models

Correct Answer:A

What are the three types of data that indexes contain in Splunk Cloud?

A. Raw data, index data, and metadata

B. Raw data, event data, and metadata

C. Raw data, index data, and event data

D. Raw data, index data, and metrics data

Correct Answer:A

Which setting in inputs.conf can be used to specify the SSL certificate for a TCP or UDP input?

A. sslCertPath

B. sslRootCAPath

C. sslPassword

D. All of the above

Correct Answer:D

START SPLK-1005 EXAM