Which of the following authentication types requires scripting in Splunk?

1. A. ADFS
2. B. LDAP
3. C. SAML
4. D. RADIUS

Correct Answer: D
Reference: https://answers.splunk.com/answers/131127/scripted-authentication.html

What are the minimum required settings when creating a network input in Splunk?

1. A. Protocol, port number
2. B. Protocol, port, location
3. C. Protocol, username, port
4. D. Protocol, IP, port number

Correct Answer: A
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/UsetheHTTPEventCollector

For single line event sourcetypes, it is most efficient to set SHOULD_LINEMERGE
to what value?

1. A. True
2. B. False
3. C. <regex string>
4. D. Newline Character

Correct Answer: B
Reference: https://answers.splunk.com/answers/704533/what-are-the-best-practices-for-defining-source-ty.html

Which forwarder type can parse data prior to forwarding?

1. A. Universal forwarder
2. B. Heaviest forwarder
3. C. Hyper forwarder
4. D. Heavy forwarder

Correct Answer: D
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders

In which scenario would a Splunk Administrator want to enable data integrity check when creating an index?

1. A. To ensure that hot buckets are still open for writers and have not been forced to roll to a cold state.
2. B. To ensure that configuration files have not been tampered with for auditing and/or legal purposes.
3. C. To ensure that user passwords have not been tampered with for auditing and/or legal purposes.
4. D. To ensure that data has not been tampered with for auditing and/or legal purposes.

Correct Answer: D
Reference: https://www.splunk.com/blog/2015/10/28/data-integrity-is-back-baby.html