SPLK-1005無料問題集「Splunk Cloud Certified Admin」

質問 1

In which file can the SH0ULD_LINEMERCE setting be modified?

（A）props.conf

（B）inputs.conf

（C）outputs.conf

（D）transforms.conf

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

When a forwarder phones home to a Deployment Server it compares the check-sum value of the forwarder's app to the Deployment Server's app. What happens to the app If the check-sum values do not match?

（A）A warning is generated on the Deployment Server stating the apps are out of sync. An Admin will need to confirm which version of the app should be used.

（B）The app on the forwarder is always deleted and re-downloaded from the Deployment Server.

（C）The app on the forwarder is only deleted and re-downloaded from the Deployment Server if the forwarder's app has a smaller check-sum value.

（D）The app is downloaded from the Deployment Server and the changes are merged.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A log file is being ingested into Splunk, and a few events have no date stamp. How would Splunk first try to determine the missing date of the events?

（A）Splunk will take the date from the file modification time.

（B）Splunk will use the date of when the file monitor was created.

（C）Splunk will use the current system time of the Indexer for the date.

（D）Splunk will take the date of a previous event within the log file.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following is an accurate statement about the delete command?

（A）Deleting events reclaims disk space.

（B）Events are virtually deleted by marking them as deleted.

（C）By default, only admins can run the delete command.

（D）The delete command removes events from disk.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Due to internal security policies, a Splunk Cloud administrator cannot send data directly to Splunk Cloud from certain data sources. Additional parsing and API-based data sources also need to be sent to Splunk Cloud. What forwarder type should the Splunk Cloud administrator use to satisfy these requirements within their environment?

（A）Heavy forwarder as an intermediate forwarder

（B）Universal forwarder as an intermediate forwarder

（C）Light forwarder as an intermediate forwarder

（D）Syslog-ng server with a universal forwarder

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

What is the recommended method to test the onboarding of a new data source before putting it in production?

（A）Send test data to a test index.

（B）Replicate Splunk deployment in a test environment.

（C）Send data to the chance index.

（D）Send data to the associated production index.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

When monitoring network inputs, there will be times when the forwarder is unable to send data to the indexers. Splunk uses a memory queue and a disk queue. Which setting is used for the disk queue?

（A）diskQiioiioiiizo

（B）maxQeueSize

（C）queueSize

（D）persistentQueueSize

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

What is the name of the Splunk index that contains the most valuable information for troubleshooting a Splunk issue?

（A）_internal

（B）lastchanceindex

（C）_monitoring

（D）defaultdb

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SPLK-1005 無料問題集「Splunk Cloud Certified Admin」

弊社を連絡する

関連リンク

トップ試験