Microsoft
Amazon
CompTIA
Salesforce
Cisco®
SAP
PMI
ISC
ISACA
VMware
HP
Palo Alto Networks
EC-Council
LPI
Google
Fortinet
All Vendors
  2. Home
  3. Exam List
  4. Splunk®
  5. SPLK-1003

Splunk Enterprise Certified Admin
SPLK-1003 Exam

Within props.conf, which stanzas are valid for data modification? (Select all that apply.)

  1. Host
  2. Server
  3. Source
  4. Sourcetype

Answer(s): C,D


Reference:

https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-for-udp-514-data-sources.html



What is the correct order of steps in Duo Multifactor Authentication?

  1. 1. Request Login
    2. Connect to SAML server
    3. Duo MFA
    4. Create User session
    5. Authentication Granted
    6. Log into Splunk
  2. 1. Request Login
    2. Duo MFA
    3. Authentication Granted
    4. Connect to SAML server
    5. Log into Splunk
    6. Create User session
  3. 1. Request Login
    2. Check authentication / group mapping
    3. Authentication Granted
    4. Duo MFA
    5. Create User session
    6. Log into Splunk
  4. 1. Request Login
    2. Duo MFA
    3. Check authentication / group mapping
    4. Create User session
    5. Authentication Granted
    6. Log into Splunk

Answer(s): C


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/ConfigureDuo



Where can scripts for scripted inputs reside on the host file system? (Select all that apply.)

  1. $SPLUNK_HOME/bin/scripts
  2. $SPLUNK_HOME/etc/apps/bin
  3. $SPLUNK_HOME/etc/system/bin
  4. $SPLUNK_HOME/etc/apps/<your_app>/bin

Answer(s): A,C,D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Getdatafromscriptedinputs#Where_to_place_the_scripts_for_scripted_inputs



How does the Monitoring Console monitor forwarders?

  1. By pulling internal logs from forwarders.
  2. By using the forwarder monitoring add-on.
  3. With internal logs forwarded by forwarders.
  4. With internal logs forwarder by deployment server.

Answer(s): A




Abdul
I passed the exam on Monday morning and was amazed at how much this site had covered, fortunately that's it for another three years. The tests really did help so thanks!!
- Doha
Upvote


Rose
I passed that exam the first time. And I thank you folks for that. I could not have passed it with out your help.
- South Africa
Upvote


Shourya
I've just done my exam and passed (890) - your materials are spot on.
- UNITED STATES
Upvote


90%
I have sat and passed.
- Haidarabad
Upvote


Jessica
Thanks to this site! i passed my 310-055 exam with 90%
- UNITED STATES
Upvote


George
I passed my VCP Exam this week with an 87. I hadn't taken a cert exam in 10 years. Your product was very helpful and helped me hone the areas where I was lacking. Thank you.
- UNITED ARAB EMIRATES
Upvote


David B.
I would like to thank this site for the great support and passing 920-105 exam with excellent result. Thanks once again!
- UNITED STATES
Upvote


Bruce Gord
Thanks Well I just passed the exam with high score. Anyway, thanks for providing the good material.
- Malaysia
Upvote


Parag
Hi, Let me appreciate your Study Guide. I passed the exam with 92%. All the questions were from the study guide. I am still wondering where I went wrong for not scoring 100%. I will not hesitate to recommend your site to my friends and colleagues. Thanks
- UNITED STATES
Upvote


J M
Hello, I purchased your 640-801 last week and I was able to pass my exam with 96%. The questions were all the same. I wondering how you guys do it? Keep up the good job. I appreciate your service and your best price. Thanks
- UNITED STATES
Upvote

Read more ...