Integrate Splunk with LDAP, Active Directory, or SAML CLOUD-CERTIFIED-ADMIN Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is implementing SAML SSO for Splunk Cloud. The admin has configured the IdP metadata and attribute mappings. Users can log in, but they are all assigned the 'user' role, even though some should have the 'admin' role. The IdP is sending a 'role' attribute with values like 'admin' and 'user'. The admin has verified that the attribute mapping is correct. What should the admin check next?

   • AThe IdP is sending the role attribute in the SAML assertion.
   • BThe entity ID is correct.
   • CThe users are in the correct groups in the IdP.
   • DThe role values in the SAML assertion match the role names in Splunk.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard · select all that apply

   A Splunk Cloud admin is configuring role mapping for LDAP and AD integration. The admin wants to ensure that users from both directories receive the correct roles. Which of the following are valid considerations for role mapping? (Select all that apply.)

   • ARole mapping is configured separately for each authentication strategy.
   • BRole mapping can map multiple external groups to a single Splunk role.
   • CRole mapping can map a single external group to multiple Splunk roles.
   • DRole mapping is global and applies to all authentication strategies.
   • ERole mapping is only available for SAML, not LDAP or AD.
   Check answers Discussion Select an answer first
4. 8application · medium

   An organization is implementing SAML SSO for Splunk Cloud. The admin has configured the IdP metadata and attribute mappings. Users can log in, but they are all assigned the 'user' role, even though some should have the 'admin' role. The IdP is sending a 'role' attribute with values like 'admin' and 'user'. What should the admin do?

   • AVerify that the role attribute mapping is correct in Splunk.
   • BConfirm that the entity ID is correct.
   • CEnsure that the users are in the correct groups in the IdP.
   • DCheck that the IdP is sending the role attribute in the SAML assertion.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A Splunk Cloud admin is configuring LDAP integration. The admin has set up the LDAP strategy and server, and has mapped the 'splunk_users' group to the 'user' role. However, when a user in that group logs in, they are not assigned the 'user' role. The admin has verified the group base DN and the user's group membership. What should the admin check next?

   • AThe user's password is correct.
   • BThe LDAP group attribute that Splunk uses to identify group membership.
   • CThe bind credentials have permission to read group membership.
   • DThe LDAP server is reachable.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When configuring Splunk as a SAML service provider, what is the role of the identity provider (IdP) metadata?

   • AIt specifies the Splunk instance's entity ID
   • BIt provides Splunk with the IdP's endpoints, certificates, and signing keys needed to trust and communicate with the IdP
   • CIt defines the Splunk roles that SAML users will be assigned
   • DIt contains the user's password for authentication
   Reveal Solution Discussion Select an answer first