Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Splunk® SPLK-1003

Splunk® SPLK-1003 Exam Practice Questions (P. 3)

  • Full Access (191 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
This file has been manually created on a universal forwarder:
/opt/splunkforwarder/etc/apps/my_TA/local/inputs.conf
[monitor:///var/log/messages]
sourcetype=syslog
index=syslog
A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file:
/opt/splunk/etc/deployment-apps/my_TA/local/inputs.conf
[monitor:///var/log/maillog]
sourcetype=maillog
index=syslog
Which file is now monitored?
  1. A
    /var/log/messages
  2. B
    /var/log/maillog
  3. C
    /var/log/maillog and /var/log/messages
  4. D
    none of the above

Correct Answer:
A
Reference:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Updating/Exampleaddaninputtoforwarders

Question #12
In which phase of the index time process does the license metering occur?
  1. A
    Input phase
  2. B
    Parsing phase
  3. C
    Indexing phase
  4. D
    Licensing phase

Correct Answer:
C
Reference:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/HowSplunklicensingworks

Question #13
You update a props.conf file while Splunk is running. You do not restart Splunk and you run this command: splunk btool props list `"-debug. What will the output be?
  1. A
    A list of all the configurations on-disk that Splunk contains.
  2. B
    A verbose list of all configurations as they were when splunkd started.
  3. C
    A list of props.conf configurations as they are on-disk along with a file path from which the configuration is located.
  4. D
    A list of the current running props.conf configurations along with a file path from which the configuration was made.

Correct Answer:
D
Reference:
https://answers.splunk.com/answers/494219/need-help-with-what-should-be-a-simple-precedence.html

Question #14
When running the command shown below, what is the default path in which deploymentserver.conf is created? splunk set deploy-poll deployServer:port
  1. A
    SPLUNK_HOME/etc/deployment
  2. B
    SPLUNK_HOME/etc/system/local
  3. C
    SPLUNK_HOME/etc/system/default
  4. D
    SPLUNK_HOME/etc/apps/deployment

Correct Answer:
B
Reference:
https://docs.splunk.com/Documentation/Splunk/7.3.1/Updating/Configuredeploymentclients

Question #15
The priority of layered Splunk configuration files depends on the file's:
  1. A
    Owner
  2. B
    Weight
  3. C
    Context
  4. D
    Creation time

Correct Answer:
C
Reference:
https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Wheretofindtheconfigurationfiles

Previous Questions Next Questions

All Pages