nerdexam
Splunk

SPLK-3001 · Question #19

If a username does not match the 'identity' column in the identities list, which column is checked next?

The correct answer is A. Email. When a username fails to match the 'identity' column, the system falls back to checking the email column next, making A correct - email is the standard secondary identifier in most identity matching workflows because it is globally unique and user-specific. Nickname (B) is…

Lookups and Identity Management

Question

If a username does not match the 'identity' column in the identities list, which column is checked next?

Options

  • AEmail.
  • BNickname
  • CIP address.
  • DCombination of Last Name, First Name.

How the community answered

(18 responses)
  • A
    94% (17)
  • D
    6% (1)

Explanation

When a username fails to match the 'identity' column, the system falls back to checking the email column next, making A correct - email is the standard secondary identifier in most identity matching workflows because it is globally unique and user-specific. Nickname (B) is wrong because nicknames are informal, non-unique display names not used for authentication lookups. IP address (C) is wrong because IP addresses identify devices or network locations, not individual user identities, and change frequently. A combination of Last Name + First Name (D) is wrong because names are not unique - two users can share the same full name, making this unreliable as an identity fallback.

Memory tip: Think of the fallback order as moving from "most specific login credential" to "next most specific" - username first, then the other credential you use to log in everywhere: your email.

Topics

#identity management#identity lookup#username matching#email fallback

Community Discussion

No community discussion yet for this question.

Full SPLK-3001 Practice