Objective 11.2
Cloud Certified AdminUse transformations with props.conf and transforms.conf to modify raw data
Objective 11.2 sits in Manipulating Raw Data, which carries 10% of the Cloud Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A masking rule will change often across inputs. Which method does Splunk favour?
Correct.
Checked against help.splunk.com, August 2026Concept
A rule that will be edited and reused belongs in the form easiest to change and to attach in several places. The extra setup is repaid the first time it moves.
Why D
Splunk states that the regular expression transform method takes longer to configure but is less complex to modify after the initial configuration, and that you can assign it to multiple data inputs more flexibly.
Source
Splunk Docs: Anonymize data, checked August 2026Use a regular expression (regex) transform. This method takes longer to configure, but less complex to modify after the initial configuration. You can also assign this method to multiple data inputs more flexibly.
Now you: objective 11.2 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A team wants masking at search time rather than index time. What does Splunk say to use?
Sample question 2 of 3
An administrator asks where anonymization can be configured on Splunk Enterprise. What does Splunk say?
Sample question 3 of 3
An administrator asks which anonymization method suits several inputs. What does Splunk say?
Full Cloud Certified Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.