Question

Which of the following are true of REST API and Splunk?

1) Provides direct and timely access to data
2) Supports basic and API-based authentication
3) Reduces overhead of maintaining machines and network infrastructure
4) Decreases transmitted data security
5) On-prem API are encrypted when deployed in Cloud apps and use a key for security
6) All are true

Answer 1

Not all the statements about REST API and Splunk are true. While REST API in Splunk offers direct data access and supports various authentication methods, it does not inherently decrease transmitted data security. Encryption is standard for on-prem APIs in cloud deployments, including those used by Splunk.

Step-by-step explanation:

When considering the REST API and Splunk, it is important to understand how they operate to evaluate the statements in question. To address the points:

1. Provides direct and timely access to data: This is generally true for REST APIs, including when used with Splunk, as they allow for real-time data access and manipulation over HTTP.
2. Supports basic and API-based authentication: REST APIs do support different methods of authentication including basic (with a username and password) and API-based (such as tokens), which Splunk's REST API also offers.
3. Reduces overhead of maintaining machines and network infrastructure: This can be true, particularly if Splunk is used in a cloud environment, as it can reduce the need for on-premises hardware.
4. Decreases transmitted data security: This statement is not typically true; REST APIs, including those used by Splunk, implement security measures to protect data in transit, such as SSL/TLS encryption.
5. On-prem API are encrypted when deployed in Cloud apps and use a key for security: When deployed in cloud applications, APIs generally use encryption, and Splunk Cloud ensures data is encrypted at rest and in transit with the use of keys.

Based on these points, not all statements are true, particularly statement 4 regarding decreased transmitted data security, which is not an inherent characteristic of REST APIs or Splunk.