Splunk Core Certified User — Question 204

By default, which role contains the minimum permissions required to have write access to Splunk alerts?

Answer options

• A. Alerting
• B. Admin
• C. Power
• D. User

Correct answer: C

Explanation

The correct answer is C, Power, as it is the role that provides the minimum required permissions to create and modify alerts in Splunk. The Admin role has broader permissions than necessary for this task, while the Alerting and User roles do not have sufficient write access for alerts.