Splunk SPLK-1001 Exam Questions Free Practice Test

Viewing page 6 out of 8 pages

Viewing questions 51-60 out of questions

Questions # 51:

Which of the following is true about user account settings and preferences?

Options:

Search & Reporting is the only app that can be set as the default application.

Full names can only be changed by accounts with a Power User or Admin role.

Time zones are automatically updated based on the setting of the computer accessing Splunk.

Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

Expert Solution

Questions # 52:

Forward Option gather and forward data to indexers over a receiving port from remote machines.

Options:

False

True

Expert Solution

Questions # 53:

Which of the following represents the Splunk recommended naming convention for dashboards?

Options:

Description_Group_Object

Group_Description_Object

Group_Object_Description

Object_Group_Description

Expert Solution

Questions # 54:

Which Boolean operator is implied between search terms, unless otherwise specified?

Options:

AND

NOT

NAND

Expert Solution

Questions # 55:

When saving a search directly to a dashboard panel instead of saving as a report first, which of the following is

created?

Options:

Cloned panel

Inline panel

Report panel

Prebuilt panel

Expert Solution

Questions # 56:

Which search string only returns events from hostWWW3?

Options:

B. host=WWW3

C. host=WWW*

D. Host=WWW3

Expert Solution

Questions # 57:

Which search will return only events containing the word “error” and display the results as a table that includes

the fields named action, src, and dest?

Options:

error | table action, src, dest

error | tabular action, src, dest

error | stats table action, src, dest

error | table column=action column=src column=dest

Expert Solution

Questions # 58:

What is the default lifetime of every Splunk search job?

Options:

All search jobs are saved for 10 days

All search jobs are saved for 10 hours

All search jobs are saved for 10 weeks

All search jobs are saved for 10 minutes

Expert Solution

Questions # 59:

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

Options:

(index=netfw failure) AND index=netops warn OR critical

(index=netfw failure) OR (index=netops (warn OR critical))

(index=netfw failure) AND (index=netops (warn OR critical))

(index=netfw failure) OR index=netops OR (warn OR critical)

Expert Solution

Questions # 60:

When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?

Options:

$SPLUNK_HOME/bin/scripts

$SPLUNK_HOME/etc/scripts

$SPLUNK_HOME/bin/etc/scripts

$SPLUNK_HOME/etc/scripts/bin

Expert Solution

Viewing page 6 out of 8 pages

Viewing questions 51-60 out of questions

Pass the Splunk Splunk Core Certified User SPLK-1001 Questions and answers with CertsForce