Splunk Enterprise Certified Admin — Question 61

Which of the following statements describe an HEC token? (Select all that apply.)

Answer options

• A. Maps to a Splunk user.
• B. Can be used to download data.
• C. Is a GUID (globally unique identifier).
• D. Can be created in Splunk Web or using REST endpoints.

Correct answer: C, D

Explanation

The correct answers are C and D because an HEC token is indeed a GUID that uniquely identifies the token and can be created through both Splunk Web and REST endpoints. Options A and B are incorrect as they do not accurately describe the properties of an HEC token.