List SAML and SSO Options CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Splunk consultant is configuring SAML for a customer. The customer's identity provider requires the assertion to be signed. The consultant has uploaded the IdP's signing certificate to Splunk. What additional configuration is required on the Splunk side to complete the setup?

   • AConfigure Splunk to use the IdP's certificate as its own service provider certificate
   • BConfigure Splunk to sign its own SAML requests with its service provider certificate
   • CDisable the 'Validate SAML response signature' option to avoid conflicts
   • DEnable the 'Validate SAML response signature' option in Splunk's SAML settings
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A company is implementing SAML SSO for Splunk. They have a requirement that users must be able to log in even if the identity provider is temporarily unavailable. What should the Splunk consultant recommend?

   • ADeploy a second identity provider as a backup
   • BEnable a fallback authentication method, such as local Splunk authentication, for emergency access
   • CDisable SAML and use LDAP authentication instead
   • DConfigure Splunk to cache SAML assertions locally
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In Splunk, what is the purpose of configuring SAML attribute mapping?

   • ATo translate SAML attributes into Splunk user roles
   • BTo encrypt SAML assertions between the IdP and Splunk
   • CTo create local Splunk user accounts for each SAML user
   • DTo synchronize user passwords from the IdP to Splunk
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company with 500 employees uses Okta for identity management. They want Splunk users to log in with their corporate Okta credentials instead of maintaining separate Splunk passwords. The security team requires that authentication decisions happen at Okta, not in Splunk. Which SSO approach should the Splunk consultant recommend?

   • AConfigure Okta as the identity provider and Splunk as the service provider using SAML
   • BCreate matching local Splunk accounts and sync passwords with Okta via SCIM
   • CSet up Splunk to proxy authentication to Okta using LDAP bind requests
   • DConfigure Splunk as the identity provider and Okta as the service provider using SAML
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a single sign-on option that Splunk supports for authenticating users?

   • ASAML
   • BRADIUS
   • CKerberos
   • DOAuth 2.0
   Reveal Solution Discussion Select an answer first