Use the HTTP Event Collector (HEC) to Get Data into Splunk CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which HTTP status code indicates that HEC successfully accepted the event?

   • A202 Accepted
   • B201 Created
   • C200 OK
   • D204 No Content
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a common cause of HEC data not appearing in Splunk?

   • AThe client is using HTTP instead of HTTPS
   • BThe event payload is not valid JSON
   • CThe token has no write permission for the user
   • DThe indexer is not running
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How is authentication typically provided in an HEC POST request?

   • AUsing a username and password in the URL
   • BUsing an Authorization header with a Bearer token
   • CUsing a client certificate only
   • DUsing a session token from Splunk Web
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of setting a default index on an HEC token?

   • ATo enable SSL encryption for the token
   • BTo restrict which users can send data with the token
   • CTo set the source type for all events sent with the token
   • DTo specify the index where events are stored if not overridden in the payload
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the role of the HEC token in security?

   • AIt encrypts the event data
   • BIt defines the index for the data
   • CIt authenticates the client sending data
   • DIt compresses the payload
   Reveal Solution Discussion Select an answer first