Integrate Splunk with LDAP, Active Directory, or SAML CLOUD-CERTIFIED-ADMIN Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   A user reports they cannot log in to Splunk after SAML integration. Which Splunk log would you most likely check to troubleshoot the authentication failure?

   • Aaudit.log
   • Blicense_usage.log
   • Csplunkd.log
   • Dmetrics.log
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In Splunk's SAML configuration, what is the purpose of the entity ID?

   • AIt uniquely identifies the Splunk service provider to the identity provider
   • BIt contains the public certificate used to encrypt SAML assertions
   • CIt defines the attribute that contains the user's role in Splunk
   • DIt specifies the URL where Splunk receives SAML responses
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   After configuring Active Directory authentication in Splunk Cloud, an admin wants to verify that the integration works correctly. The admin has tested a user login and it succeeded. What additional step should the admin take to ensure the integration is fully functional?

   • AConfirm that the AD server is reachable from Splunk Cloud.
   • BVerify that the user's roles are correctly assigned based on AD group membership.
   • CReview the Splunk configuration file for the AD strategy.
   • DCheck the Splunk audit logs for any authentication errors.
   Reveal Solution Discussion Select an answer first