Scripted and WMI Inputs SPLK-1003 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A WMI input is failing to collect data from a remote Windows host. What is a likely cause?

   • AThe credentials provided do not have permission to access WMI on the target host
   • BThe source type is not set
   • CThe interval is set too high
   • DThe target host is running Linux
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A Splunk administrator is troubleshooting a scripted input that runs a PowerShell script on a Windows universal forwarder. The script works correctly when run manually from an administrative PowerShell session. However, when run as a scripted input, it fails with an 'Access denied' error. The forwarder runs as 'NT AUTHORITY\NetworkService'. What is the most likely cause of the failure?

   • AThe script attempts to access a network share that the NetworkService account does not have permission to access
   • BThe script output is too large for Splunk to handle
   • CThe script uses a PowerShell module that is not installed on the system
   • DThe script is trying to write to a file in a protected directory
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What does Splunk do with the standard output of a scripted input?

   • AIt indexes the output as events
   • BIt discards the output
   • CIt sends the output to the monitoring console
   • DIt logs the output to splunkd.log
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When creating a WMI input in Splunk Web, which of the following must you specify?

   • AThe name of the Windows event log to monitor
   • BThe port number for the WMI service
   • CA WMI query and the interval at which to run it
   • DThe path to a script that will perform the WMI query
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a common use case for a scripted input?

   • AIngesting data from a REST API that returns JSON
   • BMonitoring a log file that is appended to continuously
   • CCollecting performance counters from a Windows host
   • DReceiving syslog data from network devices
   Reveal Solution Discussion Select an answer first