Splunk Exam SPLK-1003 Topic 3 Question 62 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 62
Topic #: 3

Social Security Numbers (PII) data is found in log events, which is against company policy. SSN format is as

follows: 123-44-5678.

Which configuration file and stanza pair will mask possible SSNs in the log events?

Aprops.conf
[mask-SSN]
REX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$'
FORMAT = $1<SSN>###-##-$2
KEY = _raw

Bprops.conf
[mask-SSN]
REGEX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$'
FORMAT = $1<SSN>###-##-$2
DEST_KEY = _raw

Ctransforms.conf
[mask-SSN]
REX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$'
FORMAT = $1<SSN>###-##-$2
DEST_KEY = _raw

Dtransforms.conf
[mask-SSN]
REGEX = (?ms)^(.)\<[SSN>\d{3}-?\d{2}-?(\d{4}.*)$'
FORMAT = $1<SSN>###-##-$2
DEST_KEY = _raw

Show Suggested Answer

Suggested Answer: D

433035

by Deandrea at Nov 21, 2022, 03:41 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!