A healthcare provider is deploying Splunk to analyze patient data. The privacy officer requires that patient names be masked in search results, but the clinical research team needs to correlate outcomes with specific patients. The architect must balance these requirements. Which approach should the architect take?

Encrypt the index volume and provide the research team the encryption key

Restrict access to the entire index to the research team only

Anonymize the patient names at the forwarder

Mask the patient names and provide the research team a role that can unmask them

A university is deploying Splunk to analyze student activity logs. The legal team requires that student names and email addresses be hidden from general IT staff, but the security team needs to correlate login failures with specific users. Which approach should the architect take?

Anonymize the sensitive fields at the forwarder

Encrypt the index volume and provide the security team the encryption key

Restrict access to the entire index to the security team only

Mask the sensitive fields and provide the security team a role that can unmask them

SplunkEnterprise Certified Architect

Domain 1Objective 5

Identify Apps and Security SPLK-2002 Practice Questions (Page 3)

Part of the Requirements and Infrastructure Planning domain, which makes up ~12% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

4concepts

Questions 11–14

11expert · hard
A healthcare provider is deploying Splunk to analyze patient data. The privacy officer requires that patient names be masked in search results, but the clinical research team needs to correlate outcomes with specific patients. The architect must balance these requirements. Which approach should the architect take?
Select an answer first
12application · medium
A university is deploying Splunk to analyze student activity logs. The legal team requires that student names and email addresses be hidden from general IT staff, but the security team needs to correlate login failures with specific users. Which approach should the architect take?
Select an answer first
13foundation · easy
Which Splunk feature allows an administrator to restrict which users can view specific data, thereby supporting compliance with data protection regulations?
Select an answer first
14foundation · easy
Which Splunk security measure ensures that data transmitted between a forwarder and an indexer is protected from eavesdropping?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.

Identify Apps and Security SPLK-2002 Practice Questions (Page 3)

Questions 11–14

A university is deploying Splunk to analyze student activity logs. The legal team requires that student names and email addresses be hidden from general IT staff, but the security team needs to correlate login failures with specific users. Which approach should the architect take?

Which Splunk feature allows an administrator to restrict which users can view specific data, thereby supporting compliance with data protection regulations?

Which Splunk security measure ensures that data transmitted between a forwarder and an indexer is protected from eavesdropping?

Keep studying — Requirements and Infrastructure Planning