exam questions

Exam SPLK-1003 All Questions

View all questions & answers for the SPLK-1003 exam

Exam SPLK-1003 topic 1 question 3 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 3
Topic #: 1
[All SPLK-1003 Questions]

In case of a conflict between a whitelist and a blacklist input setting, which one is used?

  • A. Blacklist
  • B. Whitelist
  • C. They cancel each other out.
  • D. Whichever is entered into the configuration first.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
newrose
Highly Voted 4 years ago
"It is not necessary to define both an allow list and a deny list in a configuration stanza. The settings are independent. If you do define both filters and a file matches them both, Splunk Enterprise does not index that file, as the blacklist filter overrides the whitelist filter." Source: https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/Whitelistorblacklistspecificincomingdata
upvoted 5 times
...
yybbb
Most Recent 10 months, 1 week ago
Selected Answer: A
A. blacklist
upvoted 1 times
...
emlch
2 years, 3 months ago
In case of a conflict the blacklist prevails
upvoted 3 times
...
Apis
2 years, 11 months ago
Selected Answer: A
A is correct
upvoted 4 times
...
BengieQuesada
3 years, 3 months ago
A is correct Data Admin slide 123
upvoted 4 times
...
ZeusP
3 years, 6 months ago
Blacklist always overrides Whitelist
upvoted 1 times
...
Kobi
3 years, 9 months ago
Blacklist Overides Whitelist
upvoted 4 times
...
Praf7
4 years ago
A. Blacklist
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...