Splunk SPLK-1005 問題集

質問 1：
Where can an administrator download the Splunk Cloud Universal Forwarder credentials package?
A. Splunk Support.
B. Splunkbase.
C. Cloud Monitoring Console forwarder drop-down.
D. Universal Forwarder app in the Splunk Cloud search head.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Where does the regex replacement processor run?
A. Merging pipeline
B. Index pipeline
C. Typing pipeline
D. Parsing pipeline
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
How is it possible to test a script from the Splunk perspective before using it within a scripted input?
A. splunk run <scriptname>
B. splunk script <scriptname>
C. ./$SPLUNK_HOME/etc/apps/<app>/bin/<scriptname>
D. splunk cmd <scriptname>
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which of the following statements is true about data transformations using SEDCMD?
A. Operates on a REGEX pattern match of the source, sourcetype, or host of an event.
B. Can be used to manipulate the sourcetype per event.
C. Configured in props.conf and transform.conf.
D. Can only be used to mask or truncate raw data.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Windows Input types are collected in Splunk via a script which is configurable using the GUI. What is this type of input called?
A. Batch
B. Front-end
C. Modular
D. Scripted
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following is not considered a best practice for the deployment server?
A. Create small, single-purpose deployment apps.
B. Create large, multi-purpose deployment apps.
C. Use a Linux server as the deployment server.
D. Dedicate a Splunk instance as the deployment server.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
When should Splunk Cloud Support be contacted?
A. When unable to resolve issues or perform problem isolation.
B. For resizing, license changes, or any purchases.
C. For scripted input troubleshooting.
D. For all configuration changes.
正解：A
解説: (Topexam メンバーにのみ表示されます)