Define Roles and Articulate How Roles Are Used to Secure Data CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   How are roles assigned to users in Splunk?

   • AUsers are assigned to roles by an administrator in the user's account settings
   • BRoles are assigned to users based on their IP address
   • CUsers are automatically assigned to all roles
   • DUsers can assign themselves to any role
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   A user is a member of two roles: 'app_support' and 'db_admin'. The 'app_support' role has a search filter that allows index=app. The 'db_admin' role has a search filter that allows index=db. What is the user's effective search access?

   • ANo indexes, because the filters conflict.
   • BOnly index=app, because the first role assigned takes precedence.
   • COnly index=db, because the most recently assigned role takes precedence.
   • DBoth index=app and index=db.
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   When a user has multiple roles, what is their effective permission set?

   • AThe union of all capabilities and search filters from all assigned roles
   • BThe intersection of all roles' permissions
   • CThe permissions of the most recently assigned role only
   • DThe permissions of the role with the highest priority only
   Reveal Solution Discussion Select an answer first