Splunk SPLK-1003 Based on Real Exam Environment

Splunk Enterprise Certified Admin Exam Questions and Answers

Question 9

The priority of layered Splunk configuration files depends on the file's:

Owner

Weight

Context

Creation time

Question 10

Which feature of Splunk’s role configuration can be used to aggregate multiple roles intended for groups of

users?

Linked roles

Grantable roles

Role federation

Role inheritance

Question 11

TheLINE_BREAKERattribute is configured in which configuration file?

props.conf

indexes.conf

inpucs.conf

transforms.conf

Question 12

What type of data is counted against the Enterprise license at a fixed 150 bytes per event?

License data

Metricsdata

Internal Splunk data

Internal Windows logs