Splunk IT Service Intelligence Certified Admin — Question 24

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

Answer options

• A. SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000)
• B. SplunkWeb (8472), SplunkD (8589), HTTP Collector (8962)
• C. SplunkWeb (8000), SplunkD (8089), HTTP Collector (8088)
• D. SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000)

Correct answer: C

Explanation

The correct answer is C because SplunkWeb typically uses port 8000, SplunkD uses port 8089, and the HTTP Collector is configured to use port 8088. The other options either misassign the default ports or use incorrect values, making them invalid for the required configuration.