Splunk Enterprise Certified Admin Practice Test

Can you unlock a user from the CLI?

1. Yes

2. No

3. Only with admin rights

4. Only using a GUI

The correct answer is: Yes

Unlocking a user from the command-line interface (CLI) is indeed possible in Splunk. This task can be accomplished using the Splunk command-line tools, which provide administrators with the ability to manage various aspects of user accounts, including unlocking users who have been locked out due to exceeding their login attempts or for other reasons. Using the CLI, an admin can run specific commands to access the user management features. For instance, the `splunk edit user <username> -unlock` command can be used to unlock a user account directly from the terminal. This method is particularly useful for administrators who prefer CLI operations over GUI usage, allowing for quick and efficient user management. The other options present misunderstandings of how user management is conducted in Splunk. While it is true that graphical interface options exist for managing users, the capability to unlock users directly from the CLI is significant for administrative convenience and flexibility.