ExamGecko
Question list
Search
Search

List of questions

Search

Question 40 - SPLK-1005 discussion

Report
Export

Which of the following stanzas would enable a TCP input on port 1025, allowing traffic from all IP addresses except 10.5.5.1?

A)

B)

C)

D)

A.

Option A

Answers
A.

Option A

B.

Option B

Answers
B.

Option B

C.

Option C

Answers
C.

Option C

D.

Option D

Answers
D.

Option D

Suggested answer: B

Explanation:

In Splunk, to configure a TCP input on a specific port and restrict traffic from certain IP addresses, you can use the acceptFrom setting. The correct stanza that enables a TCP input on port 1025 and allows traffic from all IP addresses except 10.5.5.1 would look like this:

[tcp://1025]

acceptFrom = !10.5.5.1

Here, !10.5.5.1 denotes that traffic from this IP should be denied, while all other IP addresses are allowed. Therefore, Option B is correct.

Splunk Documentation

Reference: Inputs.conf - acceptFrom

asked 10/10/2024
Hayat Hassan
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first