Splunk Enterprise Certified Admin Practice Test

What is a characteristic of orphaned knowledge objects?

1. They belong to inactive users

2. They are automatically deleted

3. They can be assigned to active users

4. They enhance system performance

The correct answer is: They belong to inactive users

Orphaned knowledge objects are typically associated with users who are no longer active, meaning they can belong to inactive users. This situation arises when users who created knowledge objects, such as saved searches, alerts, or dashboards, leave the organization or are no longer using the system. As a result, those knowledge objects become orphaned because they do not have an active owner to manage or retrieve them. While orphaned knowledge objects do not enhance system performance directly, they might contribute to clutter if left unmanaged. They are not automatically deleted; instead, administrators usually review and possibly clean them up based on organizational policies regarding data retention and knowledge object management. The ability to assign these objects to active users is not a characteristic of orphaned knowledge objects themselves, but rather a potential administrative action that can be taken.