Free Splunk SPLK-1005 Exam Questions

Become Splunk Certified with updated SPLK-1005 exam questions and correct answers

Page: 1 / 33

Total 165 Questions | Updated On: Mar 28, 2025

Add To Cart

Question 1

Which of the following monitor inputs stanza headers would match all of the following files? /var/log/www1/secure.log, /var/log/www/secure.log, /var/log/www/logs/secure.log, /var/log/www2/secure.log

A : [monitor:///var/log/www1/secure.log]

B : [monitor:///var/log/www*/secure.*]

C : [monitor:///var/log/.../secure.*]

D : [monitor:///var/log/www1/secure.*]

Answer: C

Question 2

Which of the following files is used for both search-time and index-time configuration?

A : inputs.conf

B : props.conf

C : macros.conf

D : savesearch.conf

Answer: B

Question 3

Which of the following are default Splunk Cloud user roles?

A : must_delete, power, sc_admin

B : power, user, admin

C : apps, power, sc_admin

D : can delete, users, admin

Answer: B

Question 4

Which of the following files is used for both search-time and index-time configuration?

A : inputs.conf

B : props.conf

C : macros.conf

D : savesearch.conf

Answer: B

Question 5

Which of the following statements regarding apps in Splunk Cloud is true?

A : Self-service install of premium apps is possible.

B : Only Cloud certified and vetted apps are supported.

C : Any app that can be deployed in an on-prem Splunk Enterprise environment is also supported on Splunk Cloud.

D : Self-service install is available for all apps on Splunkbase.

Answer: B

Page: 1 / 33

Total 165 Questions | Updated On: Mar 28, 2025

Add To Cart