SPLK-1005無料問題集「Splunk Cloud Certified Admin」

質問 1

Which of the following is true when using Intermediate Forwarders?

（A）Intermediate Forwarders may be Universal Forwarders or Heavy Forwarders, but may not be mixed.

（B）Intermediate Forwarders may be a mix of Universal and Heavy Forwarders.

（C）All Intermediate Forwarders must be Heavy Forwarders.

（D）All Intermediate Forwarders must be Universal Forwarders.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

How is it possible to test a script from the Splunk perspective before using it within a scripted input?

（A）splunk run <scriptname>

（B）./$SPLUNK_HOME/etc/apps/<app>/bin/<scriptname>

（C）splunk cmd <scriptname>

（D）splunk script <scriptname>

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

In what scenarios would transforms.conf be used?

（A）Per-Event Index Routing, Applying Event Types, SEOCMD operations

（B）Per-Event Sourcetype, Per-Event Index Routing, Applying Event Types

（C）Per-Event Sourcetype, Per-Event Host Name, Per-Event Index Routing

（D）Per-Event Host Name, Per-Event Index Rooting, SEDCMD operations

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following app installation scenarios can be achieved without involving Splunk Support?

（A）Install apps via self-service.

（B）Install apps via the Request Install button.

（C）Install apps that have not gone through the vetting process.

（D）Deploy premium apps.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A monitor has been created in inputs. con: for a directory that contains a mix of file types.
How would a Cloud Admin fine-tune assigned sourcetypes for different files in the directory during the input phase?

（A）On the Indexer parsing the data, leave sourcetype as automatic for the directory monitor. Then create a props.conf that assigns a specific sourcetype by source stanza.

（B）On the forwarder collecting the data, leave sourcetype as automatic for the directory monitor. Then create a props. conf that assigns a specific sourcetype by source stanza.

（C）On the Indexer parsing the data, set multiple sourcetype_source attributes for the directory monitor collecting the files. Then create a props, com that filters out unwanted files.

（D）On the forwarder collecting the data, set multiple 3ourcotype_source attributes for the directory monitor collecting the files. Then create a props. conf that filters out unwanted files.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

How are HTTP Event Collector (HEC) tokens configured in a managed Splunk Cloud environment?

（A）A token is generated when configuring a HEC input, which should be provided to the application developers.

（B）Open a support case for each new data input and a token will be provided.

（C）Obtain a token from the organization's application developers and apply it in Settings > Data Inputs > HTTP Event Collector > New Token.

（D）Any token will be accepted by HEC, the data may just end up in the wrong index.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

What information is identified during the input phase of the ingestion process?

（A）Line breaking and timestamp.

（B）A hash of the message payload.

（C）SRC and DST IP addresses and ports.

（D）Metadata fields like sourcetype and host.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Li was asked to create a Splunk configuration to monitor syslog files stored on Linux servers at their organization. This configuration will be pushed out to multiple systems via a Splunk app using the on-prem deployment server.
The system administrators have provided Li with a directory listing for the logging locations on three syslog hosts, which are representative of the file structure for all systems collecting this data. An example from each system is shown below:

（A）

（B）

（C）

（D）

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SPLK-1005 無料問題集「Splunk Cloud Certified Admin」

弊社を連絡する

関連リンク

トップ試験