Splunk Core Certified Advanced Power User — Question 92

On the deployment server, administrators can map clients to server classes using client filters. Which of the following statements is accurate?

Answer options

• A. The blacklist takes precedence over the whitelist.
• B. The whitelist takes precedence over the blacklist.
• C. Wildcards are not supported in any client filters.
• D. Machine type filters are applied before the whitelist and blacklist.

Correct answer: A

Explanation

The correct answer is A because in client filtering, if a client is listed in both the blacklist and the whitelist, the blacklist will take priority, preventing access. Option B is incorrect as it suggests the opposite of the actual precedence. Options C and D do not accurately describe the behavior of client filters regarding wildcards and the application order of filters.