FirstTry
Enterprise Certified AdminSplunk Enterprise Certified Admin

Practice Exam 1

5 of this form’s 56 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    4-1Splunk Indexes

    A new engineer traces an event from a forwarder to the indexer and needs a name for where Splunk Enterprise finally stores the events it creates. What is an index?

  2. Question 2 of 5

    14-1Agentless Inputs

    A team wants Splunk Cloud Platform to collect WMI data directly from a Windows machine. What does Splunk say?

  3. Question 3 of 5

    11-1Forwarder Management

    You must push the same inputs.conf and a shared app out to 300 forwarders without logging into any of them. What does the deployment server distribute to those instances?

  4. Question 4 of 5

    8-2Distributed Search

    In your distributed deployment the indexers hold all the data and run the searches across it. Which functions are left for the search heads to perform?

  5. Question 5 of 5

    10-1Configuring Forwarders

    You find a light forwarder still running on an old server and have to explain in the decommission ticket what it was originally built for. What was its purpose?

0 of 56 completed

0%

The other 51 questions are the rest of this form: same 60 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on Enterprise Certified Admin.

What this exam covers

  • Splunk Admin Basics3 questions / 5% of the exam
  • License Management3 questions / 5% of the exam
  • Splunk Configuration Files3 questions / 5% of the exam
  • Splunk Indexes5 questions / 10% of the exam
  • Splunk User Management3 questions / 5% of the exam
  • Splunk Authentication Management3 questions / 5% of the exam
  • Getting Data In3 questions / 5% of the exam
  • Distributed Search5 questions / 10% of the exam
  • Getting Data In: Staging3 questions / 5% of the exam
  • Configuring Forwarders3 questions / 5% of the exam
  • Forwarder Management5 questions / 10% of the exam
  • Monitor Inputs3 questions / 5% of the exam
  • Network and Scripted Inputs3 questions / 5% of the exam
  • Agentless Inputs3 questions / 5% of the exam
  • Fine Tuning Inputs3 questions / 5% of the exam
  • Parsing Phase and Data3 questions / 5% of the exam
  • Manipulating Raw Data2 questions / 5% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.