Splunk Enterprise Security Certified Analyst — Question 44

A customer wants to migrate from using Splunk local accounts to use Active Directory with LDAP for their Splunk user accounts instead. Which configuration files must be modified to connect to an Active Directory LDAP provider?

Answer options

• A. authentication.conf, authorize.conf, ldap.conf
• B. authentication.conf, ldap.conf
• C. authentication.conf
• D. authorize.conf, authentication.conf

Correct answer: C

Explanation

The correct answer is C because only the authentication.conf file needs to be modified to integrate with Active Directory for user authentication. The other options suggest additional files that are not required for this specific LDAP connection setup.