A security team wants to ingest Azure Monitor logs into Splunk. They have decided to use the Splunk Add-on for Microsoft Cloud Services. Which configuration step is required to stream Azure Monitor logs to Splunk?

Use the Azure Monitor REST API to pull logs directly into Splunk.

Install the Azure Log Analytics agent on the Splunk server.

Configure an Azure event hub and set up a diagnostic setting to stream the logs to the event hub.

Create an Azure API app and configure it to forward logs to Splunk.

A company is ingesting Google Cloud Logging data into Splunk using the Google Cloud add-on. The data is not appearing in Splunk. The administrator has verified that the service account key is valid and the project ID is correct. What should they check next?

Verify that the Pub/Sub subscription is configured in the add-on and that the topic has messages.

Check that the Google Cloud Logging API is enabled for the project.

Ensure the Splunk indexer has enough disk space.

Confirm that the Splunk universal forwarder is running.

CiscoCertified Network Professional Security

Domain 3Objective 5

3.5 Configure Splunk to Ingest Cloud Logging and Monitoring Data from Other Security Solutions 350-701 Practice Questions (Page 2)

Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

15%of the exam

Questions 6–10

6application · medium
A security team wants to ingest Azure Monitor logs into Splunk. They have decided to use the Splunk Add-on for Microsoft Cloud Services. Which configuration step is required to stream Azure Monitor logs to Splunk?
Select an answer first
7foundation · medium
A cloud service is sending logs to Splunk, but the events appear to be missing fields. Which Splunk feature is most likely misconfigured?
Select an answer first
8foundation · medium
Which AWS service provides API activity logs that are commonly ingested into Splunk for security monitoring?
Select an answer first
9application · medium
A company is ingesting Google Cloud Logging data into Splunk using the Google Cloud add-on. The data is not appearing in Splunk. The administrator has verified that the service account key is valid and the project ID is correct. What should they check next?
Select an answer first
10foundation · medium
Which Splunk feature is used to extract fields from raw event data during the indexing phase?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.

3.5 Configure Splunk to Ingest Cloud Logging and Monitoring Data from Other Security Solutions 350-701 Practice Questions (Page 2)

Questions 6–10

A security team wants to ingest Azure Monitor logs into Splunk. They have decided to use the Splunk Add-on for Microsoft Cloud Services. Which configuration step is required to stream Azure Monitor logs to Splunk?

A cloud service is sending logs to Splunk, but the events appear to be missing fields. Which Splunk feature is most likely misconfigured?

Which AWS service provides API activity logs that are commonly ingested into Splunk for security monitoring?

A company is ingesting Google Cloud Logging data into Splunk using the Google Cloud add-on. The data is not appearing in Splunk. The administrator has verified that the service account key is valid and the project ID is correct. What should they check next?

Which Splunk feature is used to extract fields from raw event data during the indexing phase?

Keep studying — Cloud Security