Which items below are configured in inputs.conf? (Select all that apply.)
Show answer and explanation
Correct answers: A, D
SPLK-2001 Real Exam Questions
70 questions available · Page 1 of 7
Updated Exam DumpsVerified AnswersPass Guarantee
Which items below are configured in inputs.conf? (Select all that apply.)
Correct answers: A, D
Consider the following Python code snippet used in a Splunk add-on:
if not os.path.exists(full_path): self.doAction(full_path, header) else: f = open(full_path) oldORnew =
f.readline().split(",") f.close() An attacker could create a denial of service by causing an error in either the open() or readline() commands.
What type of vulnerability is this?
Correct answer: C
References:
https://dev.splunk.com/enterprise/docs/developapps/testvalidate/securitybestpractices/
Which of the following statements describe an HEC token? (Select all that apply.)
Correct answers: C, D
For a KV store, a lookup stanza in the transforms.conf file must contain which of the following? (Select all that apply.)
Correct answers: A, B
References:
https://docs.splunk.com/Documentation/Splunk/8.1.2/Knowledge/ConfigureKVstorelookups
Given a dashboard with a Simple XML extension in myApp, what is the XML reference for the file myJS.js located in myOtherApp in the location shown below?
$SPLUNK_HOME/etc/apps/myOtherApp/appserver/static/javascript/
Correct answer: A
References:
https://dev.splunk.com/enterprise/docs/developapps/visualizedata/usewebframework/modifydashboards/
In a DELETE request, what would omitting the value of_key from the REST endpoint do?
Correct answer: C
Assuming permissions are set appropriately, which REST endpoint path can be used by someone with a power user role to access information about mySearch, a saved search owned by someone with a user role?
Correct answer: D
References:
https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing
A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says "fix the permissions".
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ]
export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/
<app name>)
Correct answer: D
Which of the following is an example of a valid syntax for specifying an absolute time range modifier in a search?
Correct answer: A
References:
https://docs.splunk.com/Documentation/Splunk/8.1.2/Search/Specifytimemodifiersinyoursearch
When the search/jobs REST endpoint is called to execute a search, what can be done to reduce the results size in the results? (Select all that apply.)
Correct answers: A, B