A company is migrating from native authentication to LDAP. They want to ensure that existing Splunk users can still log in during the transition. What should they do?

Disable native authentication entirely

Use scripted authentication to bridge both methods

Configure LDAP authentication and keep native authentication as a fallback

Delete all native users before configuring LDAP

A company wants to use multi-factor authentication (MFA) for Splunk logins. Their current Splunk deployment uses native authentication. They want to integrate with an identity provider that supports MFA. What should they do?

Enable MFA in native authentication settings

Configure SAML authentication with the identity provider

Use LDAP authentication with MFA

Implement scripted authentication for MFA

A company is deploying Splunk in a hybrid cloud environment. They want to use their on-premises Active Directory for authentication but also support cloud-based users who are not in AD. They have an Azure AD tenant. What is the best approach?

Use LDAP authentication with on-prem AD only

Use native authentication and manually create cloud users

Use SAML authentication with Azure AD as the identity provider

Use scripted authentication to check both AD and Azure AD

A Splunk administrator needs to authenticate users against an existing LDAP directory but also wants to allow a few local administrators to log in even if the LDAP server is down. What should they do?

Use native authentication for all users

Use scripted authentication to handle failover

Configure LDAP as primary and native as fallback

SplunkCore Certified Consultant

Domain 3Objective 1

Identify Authentication Methods CORE-CERTIFIED-CONSULTANT Practice Questions (Page 2)

Part of the Access and Roles domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

1concept

8%of the exam

Questions 6–10

6application · medium
A company is migrating from native authentication to LDAP. They want to ensure that existing Splunk users can still log in during the transition. What should they do?
Select an answer first
7foundation · easy
A Splunk administrator is configuring authentication for a deployment that must integrate with an existing enterprise identity provider that supports Security Assertion Markup Language (SAML). Which Splunk authentication method should the administrator select?
Select an answer first
8application · medium
A company wants to use multi-factor authentication (MFA) for Splunk logins. Their current Splunk deployment uses native authentication. They want to integrate with an identity provider that supports MFA. What should they do?
Select an answer first
9expert · hard
A company is deploying Splunk in a hybrid cloud environment. They want to use their on-premises Active Directory for authentication but also support cloud-based users who are not in AD. They have an Azure AD tenant. What is the best approach?
Select an answer first
10application · medium
A Splunk administrator needs to authenticate users against an existing LDAP directory but also wants to allow a few local administrators to log in even if the LDAP server is down. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.