File Info
| Exam | Splunk Core Certified User |
| Number | SPLK-1001 |
| File Name | Splunk.SPLK-1001.TestKing.2019-06-03.23q.vcex |
| Size | 14 KB |
| Posted | Jun 03, 2019 |
| Download | Splunk.SPLK-1001.TestKing.2019-06-03.23q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which search string only returns events from hostWWW3?
- host=*
- host=WWW3
- host=WWW*
- Host=WWW3
Correct answer: B
Question 2
By default, how long does Splunk retain a search job?
- 10 Minutes
- 15 Minutes
- 1 Day
- 7 Days
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes
Question 3
Which of the following Splunk components typically resides on the machines where data originates?
- Indexer
- Forwarder
- Search head
- Deployment server
Correct answer: C
Question 4
What determines the scope of data that appears in a scheduled report?
- All data accessible to the User role will appear in the report.
- All data accessible to the owner of the report will appear in the report.
- All data accessible to all users will appear in the report until the next time the report is run.
- The owner of the report can configure permissions so that the report uses either the User role or the owner’s profile at run time.
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Managereportpermissions Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Managereportpermissions
Question 5
When writing searches in Splunk, which of the following is true about Booleans?
- They must be lowercase.
- They must be uppercase.
- They must be in quotations.
- They must be in parentheses.
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions
Question 6
When editing a dashboard, which of the following are possible options? (select all that apply)
- Add an output.
- Export a dashboard panel.
- Modify the chart type displayed in a dashboard panel.
- Drag a dashboard panel to a different location on the dashboard.
Correct answer: C
Question 7
How can search results be kept longer than 7 days?
- By scheduling a report.
- By creating a link to the job.
- By changing the job settings.
- By changing the time range picker to more than 7 days.
Correct answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes
Question 8
When looking at a dashboard panel that is based on a report, which of the following is true?
- You can modify the search string in the panel, and you can change and configure the visualization.
- You can modify the search string in the panel, but you cannot change and configure the visualization.
- You cannot modify the search string in the panel, but you can change and configure the visualization.
- You cannot modify the search string in the panel, and you cannot change and configure the visualization.
Correct answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/WorkingWithDashboardPanels Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/WorkingWithDashboardPanels
Question 9
Which of the following is true about user account settings and preferences?
- Search & Reporting is the only app that can be set as the default application.
- Full names can only be changed by accounts with a Power User or Admin role.
- Time zones are automatically updated based on the setting of the computer accessing Splunk.
- Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
Correct answer: B
Question 10
Which command is used to review the contents of a specified static lookup file?
- lookup
- csvlookup
- inputlookup
- outputlookup
Correct answer: C
