Identify Windows Input Types and Uses CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When configuring a Windows event log input in Splunk, which of the following can be specified?

   • AThe registry key to monitor
   • BThe performance counter to collect
   • CThe file path to monitor
   • DThe event log name, such as Security or Application
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A Splunk admin is tasked with monitoring a Windows server that hosts a critical application. The requirements are: (1) detect failed logins, (2) track CPU and memory usage for capacity planning, and (3) detect unauthorized changes to the application's registry settings. The admin wants to minimize the number of inputs. What is the best approach?

   • AConfigure one performance monitor input with counters for CPU, memory, and registry changes
   • BConfigure one event log input for the Security log and use the System log for performance data
   • CConfigure three separate inputs: event log for Security, performance monitor for CPU/memory, and registry input for the application key
   • DConfigure one file system input to monitor the Security log, performance logs, and registry hive files
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of a file-based input on Windows?

   • AMonitoring the C:\inetpub\logs\LogFiles\W3SVC1\u_ex.log file
   • BMonitoring the Processor performance counter
   • CMonitoring the C:\Windows\System32\config\SAM file
   • DMonitoring the Security event log
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which Windows input type is most appropriate for security monitoring to detect unauthorized access attempts?

   • AWindows performance monitor input
   • BWindows file system input
   • CWindows registry input
   • DWindows event log input
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A Splunk admin needs to collect data from a Windows host. Which of the following is a valid Windows input type in Splunk?

   • AWindows HTTP input
   • BWindows SNMP input
   • CWindows syslog input
   • DWindows event log input
   Reveal Solution Discussion Select an answer first