When running the command shown below, what is the default path in which deployment server. conf is created?
splunk set deploy-poll deployServer:port

• A.SFLUNK_HOME/etc/deployment
• B.SPLUNK_HOME/etc/system/local
• C.SPLUNK_HOME/etc/system/default
• D.SPLUNK_KOME/etc/apps/deployment

Comment: *

Name: *

Email: *

Verification: *

When configuring HTTP Event Collector (HEC) input, how would one ensure the events have been indexed?

• A.Enable indexer acknowledgment.
• B.Enable forwarder acknowledgment.
• C.splunk check-integrity -index <index name>
• D.index=_internal component=ACK | stats count by host

Comment: *

Name: *

Email: *

Verification: *

Which default Splunk role could be assigned to provide users with the following capabilities?
Create saved searches
Edit shared objects and alerts
Not allowed to create custom roles

• A.admin
• B.power
• C.user
• D.splunk-system-role

Comment: *

Name: *

Email: *

Verification: *

What happens when the same username exists in Splunk as well as through LDAP?

• A.LDAP user is automatically deleted from authentication.conf
• B.Splunk user is automatically deleted from authentication.conf.
• C.Splunk settings take precedence.
• D.LDAP settings take precedence.

Comment: *

Name: *

Email: *

Verification: *

Which feature in Splunk allows Event Breaking, Timestamp extractions, and any advanced configurations found in props.conf to be validated all through the UI?

• A.Apps
• B.Search
• C.Data preview
• D.Forwarder inputs

Comment: *

Name: *

Email: *

Verification: *