Practice SPLK-1003 Exam Online

Question 1

What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

A : Disk

B : CPUs

C : Memory

D : Network interface cards

Answer: B

Question 2

User role inheritance allows what to be inherited from the parent role? (select all that apply)

A : Parents

B : Capabilities

C : Index access

D : Search history

Answer: B,C

Question 3

Load balancing on a Universal Forwarder is not scaling correctly. The forwarder's outputs. and the tcpoutstanza are setup correctly. What else could be the cause of this scaling issue? (select all that apply)

A : The receiving port is not properly setup to listen on the right port

B : The inputs . conf'S _SYSZOG_ROVTING is not setup to use the right group names.

C : The DNS record used is not setup with a valid list of IP addresses.

D : The indexAndForward value is not set properly.

Answer: A,C

Question 4

Which Splunk configuration file is used to enable data integrity checking?

A : props.conf

B : global.conf

C : indexes.conf

D : data_integrity.conf

Answer: C

Question 5

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Name:	Splunk Enterprise Certified Admin
Exam Code:	SPLK-1003
Certification:	Splunk Enterprise Certified Admin
Vendor:	Splunk
Total Questions:	157
Last Updated:	Apr 23, 2024

Splunk SPLK-1003