SplunkEnterprise Certified Admin
Domain 2Objective 2
User and Role Administration SPLK-1003 Practice Questions (Page 2)
Part of the Indexes, Users, and Authentication domain, which makes up ~13% of our current practice bank. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 8 practice questions to prepare you well beyond it. (estimate)
8questions here
2free pages
3concepts
Questions 6–8
- 6
When creating a custom role in Splunk Enterprise, which of the following must you specify?
Select an answer first - 7
A Splunk admin is creating a custom role for a team of incident responders. The responders need to search the `security` index and also need to be able to delete events from that index in case of a false positive. They should not have access to any other index. Which capabilities should the admin include in the custom role?
Select an answer first - 8
When adding a user in Splunk Enterprise, what is the purpose of assigning a role to that user?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SPLK-1003
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1003” is a trademark of its owner, used for identification only.