SplunkCloud Certified Admin
Domain 11Objective 2
Use Transformations with Props.conf and Transforms.conf to Modify Raw Data CLOUD-CERTIFIED-ADMIN Practice Questions (Page 2)
Part of the Manipulating Raw Data domain, which accounts for 10% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)
12questions here
3free pages
7concepts
10%of the exam
Questions 6–10
- 6
In transforms.conf, which attribute defines the regular expression used by a transform to match parts of the raw data?
Select an answer first - 7
Which REGEX would correctly capture the IP address from the raw data `src=192.168.1.1`?
Select an answer first - 8
In props.conf, if TRANSFORMS = transform1, transform2, which transform runs first?
Select an answer first - 9
In props.conf, which attribute is used to apply one or more named transforms to raw data at index time?
Select an answer first - 10
Which DEST_KEY value would you use to store the transformed result in a custom field called `client_ip`?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.