A Splunk Cloud administrator is conducting a security review. They need to identify which users have accessed a specific index containing sensitive data. Which feature should the administrator use?

Ask Splunk support to provide a report of user access.

Use the Monitoring Console to view user activity.

Search the audit logs for events related to that index.

Check the `_internal` index for search history.

A financial institution uses Splunk Cloud and must comply with regulations that require data to be retained for 7 years. The administrator needs to ensure that data is not deleted before the retention period. What should the administrator do?

Create a data model that includes all data and enable acceleration.

Set the index retention policy to 7 years in the index configuration.

Ask Splunk support to disable deletion for all indexes.

Use a saved search to periodically export data to an external storage.

What is a key responsibility of a Splunk Cloud administrator when troubleshooting issues?

Rebuilding the Splunk Cloud environment from scratch

Ignoring minor issues until they become critical

Immediately escalating all issues to Splunk support without investigation

Gathering relevant logs and information before contacting support

What is the primary purpose of assigning capabilities to a role in Splunk Cloud?

To configure the Splunk Cloud deployment's network settings

To control what actions users with that role can perform

To determine the storage quota for the user

To set the user's display name in the Splunk UI

Which task is part of ensuring compliance and security in Splunk Cloud?

Implementing data governance policies

Writing security policies for the entire organization

Managing the physical security of data centers

Configuring the company's firewall

SplunkCloud Certified Admin

Domain 1Objective 2

Describe Tasks Managed by the Splunk Cloud Administrator CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Part of the Splunk Cloud Overview domain, which accounts for 5% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–3 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

5%of the exam

Questions 16–20

16expert · medium
A Splunk Cloud administrator is conducting a security review. They need to identify which users have accessed a specific index containing sensitive data. Which feature should the administrator use?
Select an answer first
17application · medium
A financial institution uses Splunk Cloud and must comply with regulations that require data to be retained for 7 years. The administrator needs to ensure that data is not deleted before the retention period. What should the administrator do?
Select an answer first
18foundation · easy
What is a key responsibility of a Splunk Cloud administrator when troubleshooting issues?
Select an answer first
19foundation · easy
What is the primary purpose of assigning capabilities to a role in Splunk Cloud?
Select an answer first
20foundation · easy
Which task is part of ensuring compliance and security in Splunk Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.