Splunk Core Certified Advanced Power User — Question 108
What happens when the same username exists in Splunk as well as through LDAP?
Answer options
- A. Splunk user is automatically deleted from authentication.conf.
- B. LDAP settings take precedence.
- C. Splunk settings take precedence.
- D. LDAP user is automatically deleted from authentication.conf.
Correct answer: C
Explanation
When a username exists in both Splunk and LDAP, Splunk settings take precedence, meaning that the local configuration will be used over the LDAP entry. The other options incorrectly suggest automatic deletion or priority of LDAP settings, which is not the case.