Question 1

What is the name of the input processor that allows you to monitor files that Windows rotates automatically on machines that run Windows Vista or Windows Server 2008 and higher?

Options :

A : UploadNoHandle

B : monitor

C : MonitorNoHandle

D : upload

Answer: C

Question 2

In Splunk, what is the component that performs Timestamp Extraction?

Options :

A : Forwarder

B : Indexer

C : Cluster Manager

D : Forwarder or Intermediate Forwarder

Answer: D

Question 3

The following sample log event shows evidence of credit card numbers being present in the transactions. loc file.

Which of these SEDCM3 settings will mask this and other suspected credit card numbers with an Y character for each character being masked? The indexed event should be formatted as follows:

Options :

A :

B :

C :

D :

Answer: A

Question 4

Which of the following monitor inputs stanza headers would match all of the following files? /var/log/www1/secure.log, /var/log/www/secure.log, /var/log/www/logs/secure.log, /var/log/www2/secure.log

Options :

A : [monitor:///var/log/www1/secure.log]

B : [monitor:///var/log/www*/secure.*]

C : [monitor:///var/log/.../secure.*]

D : [monitor:///var/log/www1/secure.*]

Answer: C

Question 5

What are the two options for Dynamic Data Storage in Splunk Cloud that allow you to move expired data from indexes to another storage location?

Options :

A : Splunk Archive and Splunk Backup

B : Splunk Archive and Self Storage

C : Self Storage and Splunk Restore

D : Splunk Backup and Self Storage

Answer: B

Free SPLK-1005 Mock Exam – Practice Online Confidently

Buying Options: