Question 1

Which option in Splunk web can be used to access the Guided Data On-boarding feature?

Options :

A : Data models

B : Data inputs

C : Data summary

D : Add data

Answer: D

Question 2

What is the main advantage of managed Splunk Cloud over self-service Splunk Cloud in terms of scalability and reliability?

Options :

A : Managed Splunk Cloud provides a single-instance environment that can scale up to 10TB/day and offers a 100% uptime SLA.

B : Managed Splunk Cloud provides a clustered environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

C : Managed Splunk Cloud provides a clustered environment that can scale up to 10TB/day and offers a 100% uptime SLA.

D : Managed Splunk Cloud provides a single-instance environment that can scale up to 5TB/day and offers a 99.9% uptime SLA

Answer: C

Question 3

The following Apache access log is being ingested into Splunk via a monitor input:

How does Splunk determine the time zone for this event?

Options :

A : The value of the TZattribute in props. cont for the a :ces3_ccwbined sourcetype.

B : The value of the TZ attribute in props, conf for the my.webserver.example host.

C : The time zone of the Heavy/Intermediate Forwarder with the monitor input.

D : The time zone indicator in the raw event data.

Answer: D

Question 4

A customer wants to mask unstructured data before sending it to Splunk Cloud. Where should SEBCMD be configured for this?

Options :

A : props. conf on a Splunk Cloud search head,

B : props.conf on a Heavy Forwarder.

C : transforms, cent on a Splunk Cloud indexer.

D : props. conf- on a Universal Forwarder.

Answer: B

Question 5

How is the forwarder configuration app for Splunk Cloud obtained?

Options :

A : Use the wget URL presented when an sc_admin user logs in for the first time.

B :

Download from the email sent to the person listed in the SHIP TO: field when the customer licensed Splunk Cloud.

C : Download from the Splunk Cloud UI under the Universal Forwarder app.

D : Download from Splunkbase using splunk.com credentials.

Answer: C

Free SPLK-1005 Mock Exam – Practice Online Confidently