Integrate Splunk with LDAP, Active Directory, or SAML CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard · select all that apply

   A Splunk Cloud admin is configuring SAML SSO. The admin has uploaded the IdP metadata and configured the entity ID. Users are able to authenticate, but they are not receiving the correct roles. The admin has verified that the attribute mapping is correct and the role values match. Which of the following could still be causing the issue? (Select all that apply.)

   • AThe role attribute is sent as a comma-separated string.
   • BThe users are not assigned to the Splunk application in the IdP.
   • CThe role attribute is sent as a multi-value attribute.
   • DThe IdP is not sending the role attribute in the SAML assertion.
   • EThe SAML response is signed with an unsupported algorithm.
   Check answers Discussion Select an answer first
2. 17foundation · easy

   When configuring Active Directory integration in Splunk, which setting specifies the location in the directory where user and group objects are stored?

   • ABase DN
   • BUser name attribute
   • CPort number
   • DBind DN
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   After configuring LDAP authentication in Splunk, what is the most direct way to verify that the integration works?

   • ALog in to Splunk using a valid LDAP user account
   • BRestart the Splunk services
   • CReview the Splunk audit log for login events
   • DCheck the Splunk license usage report
   Reveal Solution Discussion Select an answer first
5. 19expert · hard · select all that apply

   A Splunk Cloud admin is troubleshooting an authentication issue. Users are unable to log in, and the Splunk logs show 'Authentication failed' errors. The admin has verified that the LDAP and AD servers are reachable and the bind credentials are correct. Which of the following could be causing the issue? (Select all that apply.)

   • AThe user base DN is incorrect.
   • BThe user's account is locked in AD.
   • CThe user's password is incorrect.
   • DThe authentication order is misconfigured.
   • EThe user's account is disabled in LDAP.
   Check answers Discussion Select an answer first
6. 20foundation · easy

   When a new user is added to an external LDAP group that is mapped to a Splunk role, what happens after the user logs in to Splunk?

   • AThe user is assigned the role only if they also have a local Splunk account
   • BThe user is assigned the role only after the Splunk indexer restarts
   • CThe user is automatically assigned the mapped Splunk role upon successful authentication
   • DThe user must be manually assigned the role by an administrator
   Reveal Solution Discussion Select an answer first