Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Discussions
  1. Home
  2. Splunk
  3. Splunk Core Certified User
  4. SPLK-1001
  5. Splunk Core Certified User Questions and Answers

Pass the Splunk Core Certified User SPLK-1001 Questions and answers with ValidTests

Exam SPLK-1001 All Questions
Exam SPLK-1001 Premium Access

View all detail and faqs for the SPLK-1001 exam

Go to Exam
Viewing page 5 out of 8 pages
Viewing questions 41-50 out of questions
Questions # 41:

Which of the following is true about user account settings and preferences?

Options:

A.

Search & Reporting is the only app that can be set as the default application.

B.

Full names can only be changed by accounts with a Power User or Admin role.

C.

Time zones are automatically updated based on the setting of the computer accessing Splunk.

D.

Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

Expert Solution
Questions # 42:

Which Field/Value pair will return only events found in the index named security?

Options:

A.

Index=Security

B.

index=Security

C.

Index=security

D.

index!=Security

Expert Solution
Questions # 43:

It is mandatory for the lookup file to have this for an automatic lookup to work.

Options:

A.

Source type

B.

At least five columns

C.

Timestamp

D.

Input filed

Expert Solution
Questions # 44:

Which of the following file types is an option for exporting Splunk search results?

Options:

A.

PDF

B.

JSON

C.

XLS

D.

RTF

Expert Solution
Questions # 45:

Splunk Components:

Which of the following are responsible for reducing search results?

Options:

A.

search heads

B.

indexers

C.

forwarders

Expert Solution
Questions # 46:

What kind of logs can Splunk Index?

Options:

A.

Only A, B

B.

Router and Switch Logs

C.

Firewall and Web Server Logs

D.

Only C

E.

Database logs

F.

All firewall, web server, database, router and switch logs

Expert Solution
Questions # 47:

Which search matches the events containing the terms "error" and "fail"?

Options:

A.

index=security Error Fail

B.

index=security error OR fail

C.

index=security “error failure”

D.

index=security NOT error NOT fail

Expert Solution
Questions # 48:

Portal for Splunk apps can be accessed through www.splunkbase.com

Options:

A.

False

B.

True

Expert Solution
Questions # 49:

How can results from a specified static lookup file be displayed?

Options:

A.

lookup command

B.

inputlookup command

C.

Settings > Lookups > Input

D.

Settings > Lookups > Upload

Expert Solution
Questions # 50:

When viewing results of a search job from the Activity menu, which of the following is displayed?

Options:

A.

New events based on the current time range picker

B.

The same events based on the current time range picker

C.

The same events from when the original search was executed

D.

New events in addition to the same events from the original search

Expert Solution
Viewing page 5 out of 8 pages
Viewing questions 41-50 out of questions