Administer Splunk User Roles CLOUD-CERTIFIED-ADMIN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which practice supports separation of duties in Splunk role administration?

   • AEnsuring that no single user has both the ability to create data inputs and the ability to delete indexes.
   • BUsing the same role for all users to reduce complexity.
   • CAssigning all administrative capabilities to a single 'admin' role.
   • DAllowing users to create their own roles.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Where in Splunk Web can an administrator configure a role's search scope?

   • AIn the role's edit page under 'Search scope'.
   • BIn the global search settings under 'Index access'.
   • CIn the index settings page under 'Permissions'.
   • DIn the user's account settings under 'Search preferences'.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How are roles assigned to a user in Splunk?

   • ABy editing the user account and selecting the desired roles.
   • BBy placing the user in a specific index.
   • CBy creating a role and adding users to it.
   • DBy configuring the authentication method to automatically assign roles.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A Splunk Cloud admin is redesigning roles to follow least privilege and separation of duties. Currently, a single `superuser` role has `admin_all_objects` and is assigned to all five team members. The team includes two developers who need to create and edit apps, and three analysts who need to search and create reports. The admin wants to minimize the number of roles while ensuring no user has unnecessary privileges. Which approach should the admin take?

   • AKeep the `superuser` role but remove `admin_all_objects` and add only the capabilities needed by all users.
   • BCreate two roles: `app_developer` with app-related capabilities, and `analyst` with `search` and report-related capabilities. Assign the appropriate role to each user.
   • CCreate three roles: `app_developer`, `analyst`, and `superuser`, and assign `superuser` to all users.
   • DCreate a single `team` role with all capabilities needed by both developers and analysts.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How do Splunk roles relate to users and authentication?

   • AUsers must be assigned to exactly one role, which is used for both authentication and authorization.
   • BRoles are assigned to users after authentication and determine the user's authorization level.
   • CRoles replace user accounts entirely, so each user is defined by a role rather than a separate account.
   • DRoles are used to authenticate users by verifying their passwords against the role's stored credentials.
   Reveal Solution Discussion Select an answer first