255 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
What is the purpose of the 'disabled=1' attribute in an inputs.conf stanza?
The 'disabled=1' attribute in an inputs.conf stanza tells splunkd to skip loading and running that input. The stanza remains in the configuration file (so it can be re-enabled later by setting disabled=0 or removing the attribute), but the input does not execute — no data is coll…Read full explanation
You have defined a setting in $SPLUNK_HOME/etc/system/local/inputs.conf and the same setting exists in $SPLUNK_HOME/etc/apps/my_app/local/inputs.conf. Which value takes precedence?
Splunk's configuration file precedence is determined by the directory location, not timestamps or alphabetical order. The order from lowest to highest precedence is: system/default, app/default, system/local, app/local. Since app/local has higher precedence than system/local, the…Read full explanation
Which configuration file is used to define index-time field extractions and line-breaking rules?
props.conf is the Splunk configuration file that controls how the indexer processes incoming data at index time, including line-breaking rules (LINE_BREAKER, SHOULD_LINEMERGE), timestamp recognition, and field extractions via TRANSFORMS or REPORT. It is specifically designed for …Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.