Splunk Core Certified Advanced Power User — Question 11

How often does Splunk recheck the LDAP server?

Answer options

• A. Every 5 minutes.
• B. Each time a user logs in.
• C. Each time Splunk is restarted.
• D. Varies based on LDAP_refresh setting.

Correct answer: B

Explanation

The correct answer is B because Splunk checks the LDAP server for user authentication whenever a user attempts to log in. The other options suggest fixed intervals or conditions that do not accurately reflect Splunk's behavior regarding LDAP server verification.