SPLK-1003問題集、Splunk実際の試験問題

質問 1

A Universal Forwarder is monitoring a very active syslog stream and as a result is unable to switch between destinations. How would an admin safely remediate this issue?

A. Configure useAck on the forwarder.

B. Configure and enable the FVFNT BREAKER on the forwarder.

C. Configure forceTimebasedAutoLB on the forwarder.

D. Configure and enable the LINE_BREAKER on the forwarder.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which of the following is the recommended guideline for creating a new user role?

A. Create two roles based on capabilities and indexes, then utilize inheritance.

B. Create a new unique role for each unique user.

C. There are no recommended guidelines when creating new user roles.

D. Create a role that incorporates capabilities and index inheritance.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which of the following are methods for adding inputs in Splunk? (select all that apply)

A. CLI

B. Editing inputs. conf

C. Splunk Web

D. Editing monitor. conf

正解: A,B,C

解説: (PassTest メンバーにのみ表示されます)

質問 4

What is the default character encoding used by Splunk during the input phase?

A. UTF-8

B. EBCDIC

C. ISO 8859

D. UTF-16

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which network input option provides durable file-system buffering of data to mitigate data loss due to network outages and splunkd restarts?

A. queueSize

B. diskQueueSize

C. durableQueueSizeC persistentOueueSize

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)

A. forwarder.conf

B. outputs.conf

C. monitor.conf

D. inputs.conf

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which option on the Add Data menu is most useful for testing data ingestion without creating inputs.conf?

A. Upload option

B. Download option

C. Forward option

D. Monitor option

正解: A

質問 8

Which forwarder type can parse data prior to forwarding?

A. Universal forwarder

B. Heaviest forwarder

C. Hyper forwarder

D. Heavy forwarder

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

Which of the following are available input methods when adding a file input in Splunk Web? (Choose all that apply.)

A. Index once.

B. Continuously monitor.

C. Monitor interval.

D. On-demand monitor.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 10

A log file contains 193 days worth of timestamped events. Which monitor stanza would be used to collect data 45 days old and newer from that log file?

A. ignore = 45d

B. followTail = -45d

C. ignoreOlderThan = 45d

D. includeNewerThan = -35d

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 11

To set up a Network input in Splunk, what needs to be specified ' ?

A. Network protocol and port number.

B. File path.

C. Username and password

D. Network protocol and MAC address.

正解: A

解説: (PassTest メンバーにのみ表示されます)

Splunk Enterprise Certified Admin - SPLK-1003 模擬練習