SPLK-1005 Online Practice Questions and Answers

Which configuration file needs to be edited to enable local indexing on the forwarder?

A. outputs.conf

B. inputs.conf

C. props.conf

D. transforms.conf

Which setting in inputs.conf can be used to specify the command to run the script for a scripted input?

A. script

B. command

C. exec

D. run

What is the name of the configuration file where you can invoke data transformations by associating them with a host, source, or source type?

A. limits.conf

B. props.conf

C. inputs.conf

D. transforms.conf

What is the name of the Splunk Cloud feature that allows you to monitor and manage resource utilization by business units and users using a Splunk app?

A. Splunk App for Chargeback

B. Splunk App for Resource Management

C. Splunk App for Usage Analytics

D. Splunk App for Cost Optimization

Which input type can be used to monitor Windows Registry Values for changes?

A. WinRegMon

B. WinRegistry

C. WinRegValue

D. WinRegChange

Which setting in inputs.conf can be used to specify the SSL certificate for a TCP or UDP input?

A. sslCertPath

B. sslRootCAPath

C. sslPassword

D. All of the above

Which tool can be used to verify that data is actually being received on the specified port on the indexing server?

A. tcpdump

B. netstat

C. ping

D. traceroute

Which option in Splunk Web can be used to create a new local TCP input?

A. Settings > Data Inputs > TCP > New Local TCP

B. Settings > Data Inputs > TCP > Add New

C. Settings > Data Inputs > TCP > Create New

D. Settings > Data Inputs > TCP > New Data Input

Which option can be used to specify the source type of the data when creating a file or directory monitor input?

A. Set Source Type

B. Select Source Type

C. Choose Source Type

D. Define Source Type

Which configuration file parameter can be used to modify line termination settings interactively, using the Set Source Type page in Splunk Web?

A. LINE_BREAKER

B. SHOULD_LINEMERGE

C. BREAK_ONLY_BEFORE

D. TRUNCATE