SPLK-1005 Free Practice Test

What is the main difference between events indexes and metrics indexes in Splunk Cloud?

1. A. Events indexes impose minimal structure and can accommodate any kind of data, while metrics indexes use a highly structured format to handle metrics data.
2. B. Events indexes use a highly structured format to handle event-based log data, while metrics indexes impose minimal structure and can accommodate any kind of data.
3. C. Events indexes store data in compressed form, while metrics indexes store data in uncompressed form.
4. D. Events indexes store data in uncompressed form, while metrics indexes store data in compressed form.

Correct Answer: A

What is the main advantage of managed Splunk Cloud over self-service Splunk Cloud in terms of scalability and reliability?

1. A. Managed Splunk Cloud provides a single-instance environment that can scale up to 10TB/day and offers a 100% uptime SLA.
2. B. Managed Splunk Cloud provides a clustered environment that can scale up to 10TB/day and offers a 100% uptime SLA.
3. C. Managed Splunk Cloud provides a single-instance environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.
4. D. Managed Splunk Cloud provides a clustered environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

Correct Answer: B

Which setting in inputs.conf can be used to specify the interval at which the script runs for a scripted input?

1. A. interval
2. B. frequency
3. C. schedule
4. D. cron

Correct Answer: A

Which configuration file determines how a universal forwarder forwards data to the indexer?

1. A. inputs.conf
2. B. outputs.conf
3. C. props.conf
4. D. transforms.conf

Correct Answer: B

Which setting in inputs.conf can be used to set the host field to a static value for a monitor input?

1. A. host
2. B. host_regex
3. C. host_segment
4. D. host_override

Correct Answer: A