Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

  1. Home
  2. Discussions
  3. Splunk
  4. Splunk Enterprise Certified Admin
  5. SPLK-1003 Discussions
  6. SPLK-1003 Exam Topic 7 Question 61 Discussion

Splunk Enterprise Certified Admin SPLK-1003 Question # 61 Topic 7 Discussion

 Splunk Discussions      Browse All Questions      Go to Exam Detail      Get Premium Access
 Previous
Next  

Splunk Enterprise Certified Admin SPLK-1003 Question # 61 Topic 7 Discussion

SPLK-1003 Exam Topic 7 Question 61 Discussion:
Question #: 61
Topic #: 7

Social Security Numbers (PII) data is found in log events, which is against company policy. SSN format is as

follows: 123-44-5678.

Which configuration file and stanza pair will mask possible SSNs in the log events?
A.

props.conf[mask-SSN]REX = (?ms)^(.)\ < [SSN > \d{3}-?\d{2}-?(\d{4}.*)$ " FORMAT = $1 < SSN > ###-##-$2KEY = _raw

B.

props.conf[mask-SSN]REGEX = (?ms)^(.)\ < [SSN > \d{3}-?\d{2}-?(\d{4}.*)$ " FORMAT = $1 < SSN > ###-##-$2DEST_KEY = _raw

C.

transforms.conf[mask-SSN]REX = (?ms)^(.)\ < [SSN > \d{3}-?\d{2}-?(\d{4}.*)$ " FORMAT = $1 < SSN > ###-##-$2DEST_KEY = _raw

D.

transforms.conf[mask-SSN]REGEX = (?ms)^(.)\ < [SSN > \d{3}-?\d{2}-?(\d{4}.*)$ " FORMAT = $1 < SSN > ###-##-$2DEST_KEY = _raw

Get Premium SPLK-1003 Questions
Actual exam question for Splunk SPLK-1003 exam by Orion6104 at Jul 12, 2026, 4:47:51 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit
 Previous
Next