Identify Windows Input Types and Uses CLOUD-CERTIFIED-ADMIN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a Windows performance monitor input, what does an 'instance' refer to?

   • AA specific occurrence of a performance counter, such as a particular processor or disk
   • BA file system directory
   • CA specific event log
   • DA registry key value
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a Windows event log input in Splunk?

   • ATo monitor registry key changes
   • BTo collect performance counter data
   • CTo monitor files and directories
   • DTo collect security, application, system, and other event logs
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a Windows input type that can be used to collect data from the Windows registry?

   • AWindows performance monitor input
   • BWindows registry input
   • CWindows file system input
   • DWindows event log input
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a Splunk Windows input configuration, what does the 'host' setting identify?

   • AThe Windows machine from which the data is collected
   • BThe file path to monitor
   • CThe source type of the data
   • DThe event log name
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A Splunk admin is asked to provide a solution for a Windows server that must meet the following requirements: (1) real-time alerting on failed logins, (2) historical performance data for monthly capacity reports, (3) audit trail of registry changes for compliance, and (4) ingestion of a custom application log file. The admin has limited resources and wants to minimize the number of inputs. What is the most efficient approach?

   • AConfigure four separate inputs: event log for Security, performance monitor, registry input, and file input for the application log
   • BConfigure one event log input for the Security log and use a scripted input to collect performance, registry, and file data
   • CConfigure one performance monitor input with counters for security events, registry changes, and file changes
   • DConfigure one file input to monitor the Security log, performance logs, registry hives, and application log
   Reveal Solution Discussion Select an answer first