What type of data is counted against the Enterprise license at a fixed 150 bytes per event?

• A.Metricsdata
• B.License data
• C.Internal Splunk data
• D.Internal Windows logs

Comment: *

Name: *

Email: *

Verification: *

Which is a valid stanza for a network input?

• A.[udp://172.16.10.1:9997]
  connection = dns
  sourcetype = dns
• B.[any://172.16.10.1:10001]
  connection_host = ip
  sourcetype = web
• C.[tcp://172.16.10.1:9997]
  connection_host = web
  sourcetype = web
• D.[tcp://172.16.10.1:10001]
  connection_host = dns
  sourcetype = dns

Comment: *

Name: *

Email: *

Verification: *

Which Splunk component requires a Forwarder license?

• A.Search head
• B.Heavy forwarder
• C.Heaviest forwarder
• D.Universal forwarder

Comment: *

Name: *

Email: *

Verification: *

What is the correct order of steps in Duo Multifactor Authentication?

• A.1. Request Login
  2. Connect to SAML server
  3 Duo MFA
  4 Create User session
  5 Authentication Granted 6. Log into Splunk
• B.1. Request Login 2 Duo MFA
  3. Authentication Granted 4 Connect to SAML server
  5. Log into Splunk
  6. Create User session
• C.1 Request Login
  2 Check authentication / group mapping
  3 Authentication Granted
  4. Duo MFA
  5. Create User session
  6. Log into Splunk
• D.1 Request Login 2 Duo MFA
  3. Check authentication / group mapping
  4 Create User session
  5. Authentication Granted
  6 Log into Splunk

Comment: *

Name: *

Email: *

Verification: *

What is required when adding a native user to Splunk? (select all that apply)

• A.Password
• B.Username
• C.Full Name
• D.Default app

Comment: *

Name: *

Email: *

Verification: *