Integrate Splunk with LDAP, Active Directory, or SAML CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In Splunk, what is the purpose of role mapping in the context of LDAP, AD, or SAML integration?

   • ATo configure the connection settings for the external authentication server
   • BTo encrypt the communication between Splunk and the external identity source
   • CTo specify which users are allowed to log in to Splunk
   • DTo assign Splunk roles to users based on their external group memberships or SAML attributes
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Splunk, what is the primary purpose of configuring an LDAP strategy?

   • ATo encrypt all data stored on the Splunk indexers
   • BTo map Splunk roles to LDAP groups
   • CTo define how Splunk connects to and authenticates users against an LDAP server
   • DTo synchronize Splunk user accounts with the LDAP server
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company uses an on-premises LDAP directory for authentication. The Splunk Cloud admin needs to configure Splunk to authenticate users against this LDAP server. The admin has created an LDAP strategy and added the server details. However, when testing the connection, the admin receives an error that the bind attempt failed. What should the admin verify first?

   • AThe user base DN is set to the root of the LDAP tree.
   • BThe LDAP server's SSL certificate is trusted by Splunk Cloud.
   • CThe bind DN and password are correct and have permission to search the directory.
   • DThe LDAP server is reachable from the Splunk Cloud deployment.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Splunk Cloud admin is integrating Splunk with Active Directory. The admin has configured the AD server, bind credentials, and base DN. After saving the configuration, the admin tests a user login and receives an error that the user is not found. The user exists in AD and is in the correct OU. What is the most likely cause?

   • AThe user base DN is set to the wrong OU or is too restrictive.
   • BThe AD server is not reachable from Splunk Cloud.
   • CThe bind credentials have read-only access to the directory.
   • DThe user's SAMAccountName is incorrect in Splunk.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Splunk Cloud admin is configuring LDAP integration. The admin has set up the LDAP strategy and server, and now needs to map LDAP groups to Splunk roles. The admin wants users in the 'splunk_admins' LDAP group to have the 'admin' role in Splunk. What should the admin do?

   • AAdd each user individually to the 'admin' role in Splunk.
   • BCreate a role mapping that maps the 'splunk_admins' group to the 'admin' role.
   • CConfigure the LDAP server to add the 'admin' role to the user's attributes.
   • DSet the default role for the LDAP strategy to 'admin'.
   Reveal Solution Discussion Select an answer first