Authentication Integration SPLK-1003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a required component when configuring LDAP authentication in Splunk?

   • AAn MFA provider configuration
   • BAn LDAP strategy that defines the connection and authentication settings
   • CA SAML metadata file
   • DA scripted authentication script
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization requires that all Splunk logins use a smart card for authentication. They already have a PKI infrastructure. Which Splunk authentication method can be used to integrate with the smart card system?

   • ASAML authentication
   • BLDAP authentication
   • CScripted authentication
   • DNative Splunk authentication
   Reveal Solution Discussion Select an answer first
4. 3application · hard

   A Splunk admin has enabled MFA for the 'admin' role. A user with the admin role reports that they are not prompted for MFA when logging in. The user is authenticating via SAML. What is the most likely reason for this issue?

   • AThe user is logging in from a trusted IP address.
   • BThe MFA provider is not configured for SAML.
   • CThe user's role is not correctly mapped in SAML.
   • DMFA is not enforced for SAML-authenticated users unless the SAML response includes the MFA claim.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is an alternative authentication method supported by Splunk?

   • AOAuth 2.0
   • BRADIUS
   • CKerberos
   • DSAML
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses LDAP authentication for Splunk. They have an AD group called 'splunk_analysts' that should have read-only access to all data. The Splunk admin has created a role called 'analyst' with the appropriate read-only capabilities. What is the correct way to grant the 'analyst' role to members of the 'splunk_analysts' AD group?

   • ACreate a new LDAP group in AD and add all Splunk users to it.
   • BAdd a role mapping entry that maps the 'splunk_analysts' LDAP group to the 'analyst' Splunk role.
   • CEdit the 'analyst' role in Splunk and add each user's LDAP DN to the role's 'import_roles' setting.
   • DConfigure the LDAP strategy to set 'analyst' as the default role for all users.
   Reveal Solution Discussion Select an answer first