Splunk Core Certified Advanced Power User — Question 64

In case of a conflict between a whitelist and a blacklist input setting, which one is used?

Answer options

• A. Blacklist
• B. Whitelist
• C. They cancel each other out.
• D. Whichever is entered into the configuration first.

Correct answer: A

Explanation

The correct answer is A, as in most security systems, a blacklist takes priority over a whitelist. This means that if a conflict arises, the items on the blacklist will be enforced despite any allowances made by the whitelist. The other options do not reflect the standard operational behavior of these security settings.