An admin needs to add a new index-time field extraction for a custom log format. The admin plans to edit props.conf and transforms.conf in the app's local directory. Which practice is essential before making these changes?

Delete the default versions of the files

Back up the existing files to a different directory

An admin has just edited a props.conf file in an app's local directory to add a new field extraction. The admin wants to verify that the syntax is correct before restarting Splunk. Which command should the admin use?

./splunk btool props list --debug

SplunkCloud Certified Admin

Domain 4Objective 1

Review Splunk Configuration Files and Directories CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Part of the Splunk Configuration Files domain, which accounts for 5% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–3 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

5%of the exam

Questions 11–15

11application · medium
A Splunk admin is investigating why a specific configuration setting is not taking effect. The admin knows that the setting is defined in an app's default directory, but suspects a user-level override is interfering. Which directory should the admin check for user-level overrides?
Select an answer first
12application · medium
An admin needs to add a new index-time field extraction for a custom log format. The admin plans to edit props.conf and transforms.conf in the app's local directory. Which practice is essential before making these changes?
Select an answer first
13foundation · easy
Which configuration file type in Splunk is used to define access control lists (ACLs) for knowledge objects?
Select an answer first
14foundation · easy
In a standard Splunk installation, which directory contains the configuration files that apply to all users and apps globally?
Select an answer first
15application · medium
An admin has just edited a props.conf file in an app's local directory to add a new field extraction. The admin wants to verify that the syntax is correct before restarting Splunk. Which command should the admin use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.

Review Splunk Configuration Files and Directories CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–15

A Splunk admin is investigating why a specific configuration setting is not taking effect. The admin knows that the setting is defined in an app's default directory, but suspects a user-level override is interfering. Which directory should the admin check for user-level overrides?

An admin needs to add a new index-time field extraction for a custom log format. The admin plans to edit props.conf and transforms.conf in the app's local directory. Which practice is essential before making these changes?

Which configuration file type in Splunk is used to define access control lists (ACLs) for knowledge objects?

In a standard Splunk installation, which directory contains the configuration files that apply to all users and apps globally?

An admin has just edited a props.conf file in an app's local directory to add a new field extraction. The admin wants to verify that the syntax is correct before restarting Splunk. Which command should the admin use?

Keep studying — Splunk Configuration Files