If Role B inherits from Role A, what will Role B automatically have?

The same capabilities and search filters as Role A

The same authentication method as Role A

The same app permissions as Role A

Which of the following is a role-based method to restrict access to sensitive fields?

Assigning the user to the 'admin' role

Using a search filter that excludes specific field values

Using a capability to hide fields

Setting the field to 'confidential' in the index configuration

A financial services company has a Splunk environment with an index 'transactions' that contains both credit card numbers and transaction amounts. The compliance team requires that only auditors can view the credit card number field, while all finance staff can view transaction amounts. What is the most efficient way to configure role-based access?

Create two indexes: one for transactions with card numbers and one for transactions without card numbers. Assign finance staff to the latter and auditors to both.

Use a capability 'view_card_number' and assign it only to the auditor role.

Create two roles: 'finance_staff' with a search filter allowing index=transactions and a field-level deny for 'card_number'; 'auditor' with a search filter allowing index=transactions and a field-level allow for 'card_number'.

Create a single role 'finance_staff' with a search filter that excludes the 'card_number' field from all searches.

SplunkCore Certified Consultant

Domain 3Objective 4

Define Roles and Articulate How Roles Are Used to Secure Data CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Part of the Access and Roles domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

8%of the exam

Questions 11–15

11foundation · easy
If Role B inherits from Role A, what will Role B automatically have?
Select an answer first
12foundation · easy
Which of the following is a role-based method to restrict access to sensitive fields?
Select an answer first
13application · medium
A financial services company has a Splunk environment with an index 'transactions' that contains both credit card numbers and transaction amounts. The compliance team requires that only auditors can view the credit card number field, while all finance staff can view transaction amounts. What is the most efficient way to configure role-based access?
Select an answer first
14foundation · easy
Which of the following is an example of a capability in Splunk?
Select an answer first
15foundation · easy
Which of the following is a core component of a Splunk role?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Define Roles and Articulate How Roles Are Used to Secure Data CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Questions 11–15

If Role B inherits from Role A, what will Role B automatically have?

Which of the following is a role-based method to restrict access to sensitive fields?

Which of the following is an example of a capability in Splunk?

Which of the following is a core component of a Splunk role?

Keep studying — Access and Roles