최신Splunk Enterprise Certified Admin - SPLK-1003무료샘플문제
문제1
An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in Splunk Enterprise?
An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in Splunk Enterprise?
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제2
Using SEDCMD in props.conf allows raw data to be modified. With the given event below, which option will mask the first three digits of the AcctID field resulting output:
Event:
[22/Oct/2018:15:50:21] VendorID=1234 Code=B AcctID=xxx5309
Using SEDCMD in props.conf allows raw data to be modified. With the given event below, which option will mask the first three digits of the AcctID field resulting output:
Event:
[22/Oct/2018:15:50:21] VendorID=1234 Code=B AcctID=xxx5309
정답: A
문제3
What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?
What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제4
When does a warm bucket roll over to a cold bucket?
When does a warm bucket roll over to a cold bucket?
정답: D
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
Which of the following is the use case for the deployment server feature of Splunk?
Which of the following is the use case for the deployment server feature of Splunk?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제6
Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제7
Which Splunk configuration file is used to enable data integrity checking?
Which Splunk configuration file is used to enable data integrity checking?
정답: A
문제8
The following stanza is active in indexes.conf:
[cat_facts]
maxHotSpanSecs = 3600
frozenTimePeriodInSecs = 2630000
maxTota1DataSizeMB = 650000
All other related indexes.conf settings are default values.
If the event timestamp was 3739283 seconds ago, will it be searchable?
The following stanza is active in indexes.conf:
[cat_facts]
maxHotSpanSecs = 3600
frozenTimePeriodInSecs = 2630000
maxTota1DataSizeMB = 650000
All other related indexes.conf settings are default values.
If the event timestamp was 3739283 seconds ago, will it be searchable?
정답: D
문제9
Which forwarder type can parse data prior to forwarding?
Which forwarder type can parse data prior to forwarding?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제10
In this source definition the MAX_TIMESTAMP_LOOKHEAD is missing. Which value would fit best?
Event example:
In this source definition the MAX_TIMESTAMP_LOOKHEAD is missing. Which value would fit best?
Event example:
정답: B
설명: (ITDumpsKR 회원만 볼 수 있음)
문제11
What event-processing pipelines are used to process data for indexing? (select all that apply)
What event-processing pipelines are used to process data for indexing? (select all that apply)
정답: B,C
설명: (ITDumpsKR 회원만 볼 수 있음)
문제12
Which of the following types of data count against the license daily quota?
Which of the following types of data count against the license daily quota?
정답: D
문제13
An admin is configuring a Universal Forwarder and runs the following command:
splunk add forward-server 10.1.2.3:9997
Following this action, to what index are the Splunk logs sent?
An admin is configuring a Universal Forwarder and runs the following command:
splunk add forward-server 10.1.2.3:9997
Following this action, to what index are the Splunk logs sent?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)