A Splunk admin is configuring LDAP authentication and needs to specify the LDAP server's address and port. The LDAP server is at 'ldap.corp.example.com' and uses a non-standard port. Where in Splunk does the admin configure this?

In the LDAP strategy, under the server settings.

In the Splunk web UI, under Users and Roles.

In the role mapping settings, under the LDAP group.

In the authentication.conf file, under the [authentication] stanza.

A Splunk admin is configuring LDAP authentication for the first time. They have created an LDAP strategy and added the LDAP server. Users can authenticate successfully, but they all receive the default 'user' role. The admin wants members of the 'splunk_operators' AD group to receive the 'power' role. What is the most likely missing configuration?

The LDAP server's base DN is incorrect.

The 'power' role does not exist in Splunk.

The LDAP strategy is set to 'native' authentication.

A role mapping that associates 'splunk_operators' with the 'power' role.

A Splunk admin has configured an MFA provider in Splunk. The security policy requires that all users with the 'power' role must use MFA, but users with the 'user' role should not be forced. Where does the admin enforce this requirement?

In the LDAP strategy, map the 'power' role to an MFA-enabled group.

In the Splunk web UI, manually enable MFA for each user with the 'power' role.

In the authentication.conf file, set 'requireMFA = true' for the 'user' role.

In the MFA settings, select the 'power' role as the only role that requires MFA.

An organization wants to centralize user authentication for Splunk by using their existing LDAP directory. They have multiple Splunk indexers and search heads. What is the primary architectural benefit of configuring LDAP authentication in Splunk?

LDAP authentication provides a built-in second factor for all user logins.

LDAP authentication eliminates the need for Splunk roles and permissions.

LDAP authentication automatically replicates Splunk data across indexers.

Users can use their existing LDAP credentials to log in to Splunk, and account management remains in the central directory.

In the Splunk LDAP configuration, what is the purpose of the 'Bind DN' setting?

It specifies the distinguished name of the user that Splunk uses to connect to the LDAP server

It sets the password for all Splunk users

It defines the base DN from which LDAP searches begin

It maps LDAP groups to Splunk roles

SplunkEnterprise Certified Admin

Domain 2Objective 3

Authentication Integration SPLK-1003 Practice Questions (Page 4)

Part of the Indexes, Users, and Authentication domain, which makes up ~13% of our current practice bank. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

Questions 16–20

16application · medium
A Splunk admin is configuring LDAP authentication and needs to specify the LDAP server's address and port. The LDAP server is at 'ldap.corp.example.com' and uses a non-standard port. Where in Splunk does the admin configure this?
Select an answer first
17application · medium
A Splunk admin is configuring LDAP authentication for the first time. They have created an LDAP strategy and added the LDAP server. Users can authenticate successfully, but they all receive the default 'user' role. The admin wants members of the 'splunk_operators' AD group to receive the 'power' role. What is the most likely missing configuration?
Select an answer first
18application · medium
A Splunk admin has configured an MFA provider in Splunk. The security policy requires that all users with the 'power' role must use MFA, but users with the 'user' role should not be forced. Where does the admin enforce this requirement?
Select an answer first
19application · medium
An organization wants to centralize user authentication for Splunk by using their existing LDAP directory. They have multiple Splunk indexers and search heads. What is the primary architectural benefit of configuring LDAP authentication in Splunk?
Select an answer first
20foundation · easy
In the Splunk LDAP configuration, what is the purpose of the 'Bind DN' setting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1003” is a trademark of its owner, used for identification only.