Describe Tasks Managed by the Splunk Cloud Administrator CLOUD-CERTIFIED-ADMIN Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A Splunk Cloud administrator is troubleshooting a data ingestion issue. Data from a specific source is not appearing in the index, but other sources are working fine. The administrator has verified that the forwarder is running and the inputs.conf is correct. What should the administrator do next?

   • ADelete and recreate the input on the forwarder.
   • BCheck the `_internal` index for errors related to that source and verify the source type is correctly configured.
   • CContact Splunk support immediately.
   • DRestart the forwarder to force a re-read of the input.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A Splunk Cloud administrator needs to install an app that requires a specific add-on that is not yet installed. The add-on is available on Splunkbase. What is the correct order of operations?

   • AContact Splunk support to install both.
   • BInstall both simultaneously from Splunkbase.
   • CInstall the app first, then install the add-on.
   • DInstall the add-on first, then install the app.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Splunk Cloud administrator notices that searches are running slowly and some are timing out. The administrator has already checked the search head load and it appears normal. What should the administrator do next to troubleshoot the issue?

   • AIncrease the search timeout setting in the admin UI.
   • BRestart the search head from the admin UI.
   • CImmediately contact Splunk support and escalate the issue.
   • DReview the `_internal` index for search errors and check the Monitoring Console for resource usage.
   Reveal Solution Discussion Select an answer first
5. 9expert · medium

   A Splunk Cloud administrator is responsible for the day-to-day operations of the environment. They have been asked to ensure that data is being ingested correctly and that the environment is healthy. Which set of tasks should the administrator perform regularly?

   • AReview data inputs, monitor license usage, and check the Monitoring Console for health alerts.
   • BCreate new users and assign roles as needed.
   • CInstall new apps and add-ons as requested.
   • DContact Splunk support for any minor issue.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A Splunk Cloud administrator is troubleshooting an issue where a search is returning incomplete results. The search runs without errors but seems to miss events that should be present. The administrator has verified that the data is in the index. What should the administrator do next?

   • ACheck the search job inspector to see if any events were dropped or if the search was truncated.
   • BContact Splunk support immediately.
   • CIncrease the search timeout setting.
   • DRe-run the search with a broader time range.
   Reveal Solution Discussion Select an answer first