What is the correct order of steps in Duo Multifactor Authentication?
Answer(s): C
Using the provided DUO/Splunk reference URL https://duo.com/docs/splunkScroll down to the Network Diagram section and note the following 6 similar steps 1 - SPlunk connection initiated2 - Primary authentication3 - Splunk connection established to Duo Security over TCP port 443 4 - Secondary authentication via Duo Security's service 5 - Splunk receives authentication response6 - Splunk session logged in.
Where can scripts for scripted inputs reside on the host file system? (select all that apply)
Answer(s): A,C,D
"Where to place the scripts for scripted inputs. The script that you refer to in $SCRIPT can reside in only one of the following places on the host file system:$SPLUNK_HOME/etc/system/bin$SPLUNK_HOME/etc/apps/<your_App>/bin$SPLUNK_HOME/bin/scriptsAs a best practice, put your script in the bin/ directory that is nearest to the inputs.conf file that calls your script on the host file system."
How does the Monitoring Console monitor forwarders?
Quoting the following Splunk URL reference https://docs.splunk.com/Documentation/Splunk/8.2.2/DMC/DMCprerequisites "Monitoring Console setup prerequisites. Forward internal logs (both $SPLUNK_HOME/car/log/splunk and $SPLUNK_HOME/var/log/introspection) to indexers from all other components. Without this step, many dashboards will lack data."
What options are available when creating custom roles? (select all that apply)
https://docs.splunk.com/Documentation/SplunkCloud/8.2.2106/Admin/ConcurrentLimits "Set limits for concurrent scheduled searches. You must have the edit_search_concurrency_all and edit_search_concurrency_scheduled capabilities to configure these settings."
Which of the following are supported options when configuring optional network inputs?
Answer(s): B
https://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports
Post your Comments and Discuss Splunk SPLK-1003 exam prep with other Community members: