Splunk SPLK-1005 Splunk Cloud Certified Admin Online Training
Splunk SPLK-1005 Online Training
The questions for SPLK-1005 were last updated at Jun 19,2025.
- Exam Code: SPLK-1005
- Exam Name: Splunk Cloud Certified Admin
- Certification Provider: Splunk
- Latest update: Jun 19,2025
Which of the following files is used for both search-time and index-time configuration?
- A . inputs.conf
- B . props.conf
- C . macros.conf
- D . savesearch.conf
What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in Inputs. cont on the forwarders?
- A . ./splunk _internal call /services/data/input.3/filemonitor
- B . ./splunk show config inputs.conf
- C . ./splunk _internal rest /services/data/inputs/monitor
- D . ./splunk show config inputs
Which of the following lists all parameters supported by the acceptFrom argument?
- A . IPv4, IPv6, CIDRs, DNS names, Wildcards
- B . IPv4, IPv6, CIDRs, DNS names
- C . CIDRs, DNS names, Wildcards
- D . IPv4. CIDRs, DNS names. Wildcards
Which of the following tasks is not managed by the Splunk Cloud administrator?
- A . Forwarding events to Splunk Cloud.
- B . Upgrading the indexer’s Splunk software.
- C . Managing knowledge objects.
- D . Creating users and roles.
What is a private app?
- A . An app where only a specific role has read and write access.
- B . An app that is only viewable by a specific user.
- C . An app that is created and used only by a specific organization.
- D . An app where only a specific role has read access.
Which of the following is true when using Intermediate Forwarders?
- A . Intermediate Forwarders may be a mix of Universal and Heavy Forwarders.
- B . All Intermediate Forwarders must be Heavy Forwarders.
- C . Intermediate Forwarders may be Universal Forwarders or Heavy Forwarders, but may not be mixed.
- D . All Intermediate Forwarders must be Universal Forwarders.
When should Splunk Cloud Support be contacted?
- A . For scripted input troubleshooting.
- B . For all configuration changes.
- C . When unable to resolve issues or perform problem isolation.
- D . For resizing, license changes, or any purchases.
Which of the following is a valid stanza in props. conf?
- A . [sourcetype::linux_secure]
- B . [host=nyc25]
- C . [host::nyc*]
- D . [host:nyc*]
Where does the regex replacement processor run?
- A . Merging pipeline
- B . Typing pipeline
- C . Index pipeline
- D . Parsing pipeline
What is the correct syntax to monitor /apache/too/logo, /apache/bor/logs, and /apache/bar/l/logo?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D