
SplunkCloud Certified Admin
Domain 4Objective 2
Review Configuration File Precedence CLOUD-CERTIFIED-ADMIN Practice Questions (Page 2)
Part of the Splunk Configuration Files domain, which accounts for 5% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–3 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)
19questions here
4free pages
7concepts
5%of the exam
Questions 6–10
- 6
You have two props.conf files in the same app directory: 010-props.conf and 020-props.conf. Both define the same attribute for the same sourcetype. Which file's value is used?
Select an answer first - 7
An admin is troubleshooting why a custom index setting is not taking effect. The admin has a custom app 'my_app' with an indexes.conf in its default directory that sets homePath to a custom location. However, the index is still using the default path. The admin suspects a file precedence issue. Which btool command will show the effective homePath and the file that is providing it?
Select an answer first - 8
An admin is editing a custom transforms.conf file. The file contains the following stanzas in order: [my_transform] with REGEX = foo and FORMAT = value1, then [my_transform] with REGEX = bar and FORMAT = value2. A search-time transform uses this stanza. What will be the effective REGEX and FORMAT?
Select an answer first - 9
When a custom configuration file and a default configuration file define the same setting, which one takes precedence?
Select an answer first - 10
An admin is troubleshooting a search-time extraction issue. The admin has a custom app 'app_x' with a props.conf in its default directory that sets EXTRACT for a sourcetype. The admin also has a user-level props.conf in the 'search' app's local directory that sets a different EXTRACT for the same sourcetype. The admin wants to confirm which EXTRACT is being used. Which btool command will show the effective EXTRACT value and its source?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.