A Splunk consultant is configuring SAML for a customer. The customer's identity provider is Azure AD. The consultant needs to configure Splunk as a service provider. What information from Splunk is required to register the application in Azure AD?

The Splunk administrator's username and password

The Splunk search head's IP address and port number

The Splunk entity ID and the assertion consumer service (ACS) URL

The Splunk license master's hostname

What is the primary purpose of Security Assertion Markup Language (SAML) in the context of single sign-on?

To encrypt all network traffic between a client and a web server

To provide a proprietary protocol for synchronizing user passwords across multiple systems

To securely exchange authentication and authorization data between an identity provider and a service provider

To manage user accounts and group memberships within a single directory service

Which of the following is a common cause of SAML authentication failure in Splunk?

Clock skew between the identity provider and Splunk server

Insufficient disk space on the Splunk server

The Splunk web port is set to 8089

The user's browser does not support JavaScript

A company is evaluating SSO options for Splunk. They currently use a legacy on-premises identity management system that does not support SAML. They want to enable SSO without replacing their existing identity system. What should the Splunk consultant recommend?

Use LDAP authentication directly against the legacy system

Replace the legacy identity system with a SAML-compatible one

Disable SSO and use local Splunk authentication

Use a federation gateway that translates the legacy system's protocol to SAML

SplunkCore Certified Consultant

Domain 3Objective 3

List SAML and SSO Options CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Part of the Access and Roles domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

5concepts

8%of the exam

Questions 16–20

16foundation · easy
Which of the following authentication methods in Splunk is NOT typically considered a single sign-on (SSO) option?
Select an answer first
17application · medium
A Splunk consultant is configuring SAML for a customer. The customer's identity provider is Azure AD. The consultant needs to configure Splunk as a service provider. What information from Splunk is required to register the application in Azure AD?
Select an answer first
18foundation · easy
What is the primary purpose of Security Assertion Markup Language (SAML) in the context of single sign-on?
Select an answer first
19foundation · easy
Which of the following is a common cause of SAML authentication failure in Splunk?
Select an answer first
20application · medium
A company is evaluating SSO options for Splunk. They currently use a legacy on-premises identity management system that does not support SAML. They want to enable SSO without replacing their existing identity system. What should the Splunk consultant recommend?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.