nerdexam
Splunk

SPLK-1003 · Question #77

Who provides the Application Secret, Integration, and Secret keys, as well as the API Hostname when setting up Duo for Multi-Factor Authentication in Splunk Enterprise?

The correct answer is A. Duo Administrator. The Duo Administrator generates and supplies all integration credentials needed to configure Duo Multi-Factor Authentication in Splunk Enterprise.

Users and Roles

Question

Who provides the Application Secret, Integration, and Secret keys, as well as the API Hostname when setting up Duo for Multi-Factor Authentication in Splunk Enterprise?

Options

  • ADuo Administrator
  • BLDAP Administrator
  • CSAML Administrator
  • DTrio Administrator

How the community answered

(43 responses)
  • A
    91% (39)
  • B
    5% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

The Duo Administrator generates and supplies all integration credentials needed to configure Duo Multi-Factor Authentication in Splunk Enterprise.

ADuo AdministratorCorrect

The Duo Administrator logs into the Duo Admin Panel to create a new 'Web SDK' or 'Auth API' application, which generates the Integration Key, Secret Key, and API Hostname; these values are then entered into Splunk's authentication configuration to enable Duo MFA for Splunk users.

BLDAP Administrator

An LDAP Administrator manages directory services and user account provisioning, not third-party MFA integration credentials.

CSAML Administrator

A SAML Administrator configures SAML-based single sign-on federations and does not manage Duo-specific API keys or secrets.

DTrio Administrator

Trio is not a real Multi-Factor Authentication provider; this is a fictitious distractor.

Concept tested: Duo MFA integration credential provisioning for Splunk

Source: https://docs.splunk.com/Documentation/Splunk/latest/Security/SetupDuoMFA

Topics

#Multi-Factor Authentication#Duo Security#External Authentication#Security Configuration

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice