SPLK-1005 practice examsIn development
Splunk Cloud Certified Admin
Administering Splunk as a managed service, which is largely about what an administrator can no longer do: no shell access or file editing, apps requiring Cloud vetting, forwarders configured from the credentials package, Ingest Actions and intermediate heavy forwarders controlling volume before egress, and retention split between searchable and archived tiers; then roles and single sign-on mapping, workload management as the lever for contention that cannot be scaled away, the cloud monitoring console, and hybrid and federated search leaving regulated data where it must stay.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| The cloud service model, data onboarding and apps | Not published |
| Access, search management, monitoring and hybrid | Not published |
Two sample questions
1. What does a search quota on a role limit?
- How many searches that role runs at once — correct
- How many events a search may return
- How many indexes the role may reach
- How many dashboards the role may open
Why: It stops one team consuming the whole of the search tier.
2. What does self-service app install cover?
- Vetted apps — correct
- Private apps
- Core apps
- No apps
Why: Self-service installation covers already-vetted apps.
The real SPLK-1005 exam
| Length | 57 minutes |
|---|---|
| Questions | 60 |
| Pass mark | 70% |
| Price | Purchased per attempt through Pearson VUE |
| Recommended before you sit it | Splunk expects the Core Certified Power User credential and cloud administration training beforehand. |
| Valid for | 3 years |
Exam facts as published by Splunk; always check the vendor’s page before you book.
Study SPLK-1005 with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.