Splunk Core Certified User &
Splunk
Fundamentals 1 questions and
answers 2025
,T/F:
Machine data is always structured. - correct answer False.
Machine data can be structured or unstructured.
Machine data makes up for more than % of the data accumulated by organizations.
- correct answer 90
T/F:
Machine data is only generated by web servers. - correct answer False
Search requests are processed by the . - correct answer Indexers
Search strings are sent from the . - correct answer Search Head
In most Splunk deployments, serve as the primary way data is supplied for
indexing. - correct answer Forwarders
Which of these is *not* a main component of Splunk?
A) Search and investigate.
B) Compress and archive.
C) Add knowledge.
D) Collect and index data. - correct answer B) Compress and archive
What are the three main processing components of Splunk?
*(Select all that apply.)*
A) Indexers
B) Deployment Maker
C) Search Heads
D) Forwarders
E) Distributors - correct answer A) Indexers
C) Search Heads
D) Forwarders
define what users can do in Splunk.
, A) Tokens
B) Disk permissions
C) Roles - correct answer C) Roles
This role will only see their own knowledge objects and those that have been shared
with them.
A) User
B) Power
C) Admin - correct answer A) User
T/F:
You can launch and manage apps from the home app. - correct answer True
What are the three main default roles in Splunk Enterprise?
*(Select all that apply.)*
A) King
B) User
C) Manager
D) Admin
E) Power - correct answer B) User
D) Admin
E) Power
Which apps ship with Splunk Enterprise?
*(Select all that apply.)*
A) Home App
B) Sideview Utils
C) Search & Reporting
D) DB Connect - correct answer A) Home App
C) Search & Reporting
The default username and password for a newly installed Splunk instance is:
A) username and password
B) admin and changeme
C) admin and 12345
D) buttercup and rawks - correct answer B) admin and changeme
Files indexed using the *upload* input option get indexed .
Splunk
Fundamentals 1 questions and
answers 2025
,T/F:
Machine data is always structured. - correct answer False.
Machine data can be structured or unstructured.
Machine data makes up for more than % of the data accumulated by organizations.
- correct answer 90
T/F:
Machine data is only generated by web servers. - correct answer False
Search requests are processed by the . - correct answer Indexers
Search strings are sent from the . - correct answer Search Head
In most Splunk deployments, serve as the primary way data is supplied for
indexing. - correct answer Forwarders
Which of these is *not* a main component of Splunk?
A) Search and investigate.
B) Compress and archive.
C) Add knowledge.
D) Collect and index data. - correct answer B) Compress and archive
What are the three main processing components of Splunk?
*(Select all that apply.)*
A) Indexers
B) Deployment Maker
C) Search Heads
D) Forwarders
E) Distributors - correct answer A) Indexers
C) Search Heads
D) Forwarders
define what users can do in Splunk.
, A) Tokens
B) Disk permissions
C) Roles - correct answer C) Roles
This role will only see their own knowledge objects and those that have been shared
with them.
A) User
B) Power
C) Admin - correct answer A) User
T/F:
You can launch and manage apps from the home app. - correct answer True
What are the three main default roles in Splunk Enterprise?
*(Select all that apply.)*
A) King
B) User
C) Manager
D) Admin
E) Power - correct answer B) User
D) Admin
E) Power
Which apps ship with Splunk Enterprise?
*(Select all that apply.)*
A) Home App
B) Sideview Utils
C) Search & Reporting
D) DB Connect - correct answer A) Home App
C) Search & Reporting
The default username and password for a newly installed Splunk instance is:
A) username and password
B) admin and changeme
C) admin and 12345
D) buttercup and rawks - correct answer B) admin and changeme
Files indexed using the *upload* input option get indexed .
