Free Splunk SPLK-1003 Exam Dumps Questions & Answers

Which feature of Splunk's role configuration can be used to aggregate multiple roles intended for groups of users?

• A.Linked roles
• B.Role federation
• C.Role inheritance
• D.Grantable roles

The following stanzas in inputs. conf are currently being used by a deployment client:
[udp: //145.175.118.177:1001
Connection_host = dns
sourcetype = syslog
Which of the following statements is true of data that is received via this input?

• A.Local firewall ports do not need to be opened on the deployment client since the port is defined in inputs.conf.
• B.The host value associated with data received will be the IP address that sent the data.
• C.If Splunk is restarted, data may be lost.
• D.If Splunk is restarted, data will be queued and then sent when Splunk has restarted.

How would you configure your distsearch conf to allow you to run the search below?
sourcetype=access_combined status=200 action=purchase splunk_setver_group=HOUSTON A)

B)

C)

D)

• A.Option B
• B.option A
• C.Option C
• D.Option D

What configuration file are remote Windows Management Instrumentation inputs defined in?

• A.None, the inputs are defined outside of Splunk.
• B.wmi_inputs.conf
• C.wmi.conf
• D.inputs.conf

An index stores its data in buckets. Which default directories does Splunk use to store buckets? (Choose all that apply.)

• A.frozendb
• B.colddb
• C.bucketdb
• D.db