Identify Windows Input Types and Uses CLOUD-CERTIFIED-ADMIN Practice Questions (Page 5)

Questions 21–23

1. 21application · medium

   A Windows application writes a plain-text log file to D:\logs\app.log and rotates it daily by renaming the old file to app-YYYYMMDD.log. The Splunk admin needs to ingest all log files in that directory. What should the admin configure?

   • AA Windows registry input monitoring the file's last write time
   • BA Windows file system input monitoring D:\logs\ with a whitelist for app-.*\.log
   • CA Windows performance monitor input with a file counter
   • DA Windows event log input for the Application log
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of a Windows file system input in Splunk?

   • ATo monitor registry keys
   • BTo monitor files and directories on Windows systems
   • CTo collect performance counters
   • DTo collect event log data
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   A Splunk admin needs to collect DNS server events from a Windows DNS server. The DNS debug log is not enabled. Which input should the admin use?

   • AA Windows event log input for the DNS Server log
   • BA Windows file system input monitoring C:\Windows\System32\dns\dns.log
   • CA Windows registry input monitoring DNS settings
   • DA Windows performance monitor input with DNS counters
   Reveal Solution Discussion Select an answer first