File Info
| Exam | Splunk Core Certified Power User |
| Number | SPLK-1002 |
| File Name | Splunk.SPLK-1002.Test4Prep.2020-06-09.25q.vcex |
| Size | 173 KB |
| Posted | Jun 09, 2020 |
| Download | Splunk.SPLK-1002.Test4Prep.2020-06-09.25q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which one of the following statements about the search command is true?
- It does not allow the use of wildcards.
- It treats field values in a case-sensitive manner.
- It can only be used at the beginning of the search pipeline.
- It behaves exactly like search strings before the first pipe.
Correct answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/SplunkCloud/8.0.2003/Search/Usethesearchcommand Reference: https://docs.splunk.com/Documentation/SplunkCloud/8.0.2003/Search/Usethesearchcommand
Question 2
Data models are composed of one or more of which of the following datasets? (Choose all that apply.)
- Events datasets
- Search datasets
- Transaction datasets
- Any child of event, transaction, and search datasets
Correct answer: ABC
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Aboutdatamodels Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Aboutdatamodels
Question 3
Which group of users would most likely use pivots?
- Users
- Architects
- Administrators
- Knowledge Managers
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Pivot/IntroductiontoPivot Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Pivot/IntroductiontoPivot
Question 4
Based on the macro definition shown below, what is the correct way to execute the macro in a search string?
- "convert_sales(euro,€,.79)"
- 'convert_sales(euro,€,.79)'
- "convert_sales($euro$,$€$,$.79$)"
- 'convert_sales($euro$,$€$,$.79$)'
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Usesearchmacros Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Usesearchmacros
Question 5
There are several ways to access the field extractor.
Which option automatically identifies the data type, source type, and sample event?
- Event Actions > Extract Fields
- Fields sidebar > Extract New Fields
- Settings > Field Extractions > New Field Extraction
- Settings > Field Extractions > Open Field Extractor
Correct answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.4/Knowledge/Managesearch-timefieldextractions Reference: https://docs.splunk.com/Documentation/Splunk/8.0.4/Knowledge/Managesearch-timefieldextractions
Question 6
Which of the following statements describe the Common Information Model (CIM)? (Choose all that apply.)
- CIM is a methodology for normalizing data.
- CIM can correlate data from different sources.
- The Knowledge Manager uses the CIM to create knowledge objects.
- CIM is an app that can coexist with other apps on a single Splunk deployment.
Correct answer: AB
Explanation:
Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/Overview Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/Overview
Question 7
What do events in a transaction have in common?
- All events in a transaction must have the same timestamp.
- All events in a transaction must have the same sourcetype.
- All events in a transaction must have the exact same set of fields.
- All events in a transaction must be related by one or more fields.
Correct answer: B
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Abouttransactions Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Abouttransactions
Question 8
Which delimiters can the Field Extractor (FX) detect? (Choose all that apply.)
- Tabs
- Pipes
- Spaces
- Commas
Correct answer: BCD
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/FXSelectMethodstep Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/FXSelectMethodstep
Question 9
A data model consists of which three types of datasets?
- Constraint, field, value.
- Events, searches, transactions.
- Field extraction, regex, delimited.
- Transaction, session ID, metadata.
Correct answer: B
Explanation:
Reference: https://docs.splunk.com/Splexicon:Datamodeldataset Reference: https://docs.splunk.com/Splexicon:Datamodeldataset
Question 10
Which of the following statements describe calculated fields? (Choose all that apply.)
- Calculated fields can be used in the search bar.
- Calculated fields can be based on an extracted field.
- Calculated fields can only be applied to host and sourcetype.
- Calculated fields are shortcuts for performing calculations using the eval command.
Correct answer: BD
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/definecalcfields Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/definecalcfields
