Objective 14.1

Enterprise Certified Admin

Creating Windows Management Instrumentation (WMI) inputs

Objective 14.1 sits in Agentless Inputs, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

14-1Agentless Inputs

An administrator wants Windows event log data from machines without installing software on them. Which does Splunk support?

A monitor inputA monitor input reads files where it is installed.
WMI providersCorrect · your answerCorrect.
An upload inputThe upload input loads a single file one time.
A syslog serverA syslog server receives syslog rather than Windows event logs.

Correct.

Checked against help.splunk.com, August 2026

Concept

Collecting without an agent on every machine is what makes a large Windows estate tractable at first. The cost of that convenience shows up as load on the collector.

Why B

Splunk states that the platform supports the use of Windows Management Instrumentation providers for access to Windows performance and event log data on remote Windows machines without the need to install software on those machines.

Source

The Splunk platform supports the use of Windows Management Instrumentation (WMI) providers for access to Windows performance and event log data on remote Windows machines without the need to install software on those machines.

Splunk Docs: Monitor data through WMI, checked August 2026
#inputs#wmi

Now you: objective 14.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

14-1Agentless Inputs

An administrator asks what kind of input the WMI data input is. What does Splunk say?

Sample question 2 of 3

14-1Agentless Inputs

A team collects many event logs from busy domain controllers. What does Splunk recommend over WMI?

Sample question 3 of 3

14-1Agentless Inputs

A team wants Splunk Cloud Platform to collect WMI data directly from a Windows machine. What does Splunk say?

Full Enterprise Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Agentless Inputs