Question 1

Which artifact is required in the request header when creating an HTTP event?

Options :

A : ackID

B : Token

C : Manifest

D : Host name

Answer: B

Question 2

Which file will be matched for the following monitor stanza in inputs. conf?

[monitor: ///var/log/*/bar/*. txt]

Options :

A : /var/log/host_460352847/temp/bar/file/csv/foo.txt

B : /var/log/host_460352847/bar/foo.txt

C : /var/log/host_460352847/bar/file/foo.txt

D : /var/ log/ host_460352847/temp/bar/file/foo.txt

Answer: C

Question 3

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

Options :

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Question 4

Which of the following applies only to Splunk index data integrity check?

Options :

A : Lookup table

B : Summary Index

C : Raw data in the index

D : Data model acceleration

Answer: C

Question 5

What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

Options :

A : Disk

B : CPUs

C : Memory

D : Network interface cards

Answer: B

Free SPLK-1003 Mock Exam – Practice Online Confidently