SPLK-1003無料問題集「Splunk Enterprise Certified Admin」

質問 1

Which option accurately describes the purpose of the HTTP Event Collector (HEC)?

（A）An agent-based HTTP input that is secure and scalable and that does not require the use of forwarders.

（B）A token-based HTTP input that is secure and scalable and that does not require the use of forwarders.

（C）A token-based HTTP input that is secure and scalable and that requires the use of forwarders

（D）A token-based HTTP input that is insecure and non-scalable and that does not require the use of forwarders.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which Splunk component would one use to perform line breaking prior to indexing?

（A）Heavy Forwarder

（B）Universal Forwarder

（C）Search head

（D）This can only be done at the indexing layer.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

What options are available when creating custom roles? (select all that apply)

（A）Limit the number of concurrent search jobs

（B）Whitelist search terms

（C）Allow or restrict indexes that can be searched.

（D）Restrict search terms

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What event-processing pipelines are used to process data for indexing? (select all that apply)

（A）Parsing pipeline

（B）fifo pipeline

（C）Indexing pipeline

（D）Typing pipeline

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

After an Enterprise Trial license expires, it will automatically convert to a Free license. How many days is an Enterprise Trial license valid before this conversion occurs?

（A）7 days

（B）90 days

（C）14 days

（D）60 days

正解：D 解答を投票する

質問 6

Which of the following are reasons to create separate indexes? (Choose all that apply.)

（A）Restrict user permissions.

（B）Different retention times.

（C）Increase number of users.

（D）File organization.

正解：A、B 解答を投票する

質問 7

Event processing occurs at which phase of the data pipeline?

（A）Indexing

（B）Parsing

（C）Input

（D）Search

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which default Splunk role could be assigned to provide users with the following capabilities?
Create saved searches
Edit shared objects and alerts
Not allowed to create custom roles

（A）power

（B）user

（C）admin

（D）splunk-system-role

正解：A 解答を投票する

質問 9

The LINE_BREAKER attribute is configured in which configuration file?

（A）indexes.conf

（B）props.conf

（C）inpucs.conf

（D）transforms.conf

正解：B 解答を投票する

質問 10

After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?

（A）index=main

（B）index=summary

（C）index=test

（D）index=_internal

正解：D 解答を投票する

SPLK-1003 無料問題集「Splunk Enterprise Certified Admin」

弊社を連絡する

関連リンク

トップ試験