ExamGecko
Home / Splunk / SPLK-1001 / List of questions
Ask Question

Splunk SPLK-1001 Practice Test - Questions Answers, Page 2

Question list
Search

Question 11

Report
Export
Collapse

Which of the following are functions of the stats command?

count, sum, add
count, sum, add
count, sum, less
count, sum, less
sum, avg, values
sum, avg, values
sum, values, table
sum, values, table
Suggested answer: C
asked 23/09/2024
Sari Bukhari
33 questions

Question 12

Report
Export
Collapse

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

No events will be returned.
No events will be returned.
Splunk will prompt you to specify an index.
Splunk will prompt you to specify an index.
All non-indexed events to which the user has access will be returned.
All non-indexed events to which the user has access will be returned.
Events from every index searched by default to which the user has access will be returned.
Events from every index searched by default to which the user has access will be returned.
Suggested answer: D
asked 23/09/2024
Nicos Chamberlain
34 questions

Question 13

Report
Export
Collapse

Which search matches the events containing the terms "error" and "fail"?

index=security Error Fail
index=security Error Fail
index=security error OR fail
index=security error OR fail
index=security "error failure"
index=security "error failure"
index=security NOT error NOT fail
index=security NOT error NOT fail
Suggested answer: A

Explanation:

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Search

asked 23/09/2024
Jaap van Veldhuizen
45 questions

Question 14

Report
Export
Collapse

Which of the following is an option after clicking an item in search results?

Saving the item to a report
Saving the item to a report
Adding the item to the search.
Adding the item to the search.
Adding the item to a dashboard
Adding the item to a dashboard
Saving the search to a JSON file.
Saving the search to a JSON file.
Suggested answer: A
asked 23/09/2024
Jorge Correa
40 questions

Question 15

Report
Export
Collapse

When placed early in a search, which command is most effective at reducing search execution time?

dedup
dedup
rename
rename
sort -
sort -
fields +
fields +
Suggested answer: A
asked 23/09/2024
Miquel Triebel
36 questions

Question 16

Report
Export
Collapse

In the Splunk interface, the list of alerts can be filtered based on which characteristics?

App, Owner, Severity, and Type
App, Owner, Severity, and Type
App, Owner, Priority, and Status
App, Owner, Priority, and Status
App, Dashboard, Severity, and Type
App, Dashboard, Severity, and Type
App, Time Window, Type, and Severity
App, Time Window, Type, and Severity
Suggested answer: D
asked 23/09/2024
Dylan Johnson
42 questions

Question 17

Report
Export
Collapse

When displaying results of a search, which of the following is true about line charts?

Line charts are optimal for single and multiple series.
Line charts are optimal for single and multiple series.
Line charts are optimal for single series when using Fast mode.
Line charts are optimal for single series when using Fast mode.
Line charts are optimal for multiple series with 3 or more columns.
Line charts are optimal for multiple series with 3 or more columns.
Line charts are optimal for multiseries searches with at least 2 or more columns.
Line charts are optimal for multiseries searches with at least 2 or more columns.
Suggested answer: C
asked 23/09/2024
IQBAL SHAIKH
34 questions

Question 18

Report
Export
Collapse

A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?

An app
An app
JSON
JSON
A role
A role
An enhanced solution
An enhanced solution
Suggested answer: A
asked 23/09/2024
Selim OZIS
32 questions

Question 19

Report
Export
Collapse

Which of the following fields is stored with the events in the index?

user
user
source
source
location
location
sourcelp
sourcelp
Suggested answer: B
asked 23/09/2024
Matthew Isaacs
37 questions

Question 20

Report
Export
Collapse

Which of the following is the recommended way to create multiple dashboards displaying data from the same search?

Save the search as a report and use it in multiple dashboards as needed
Save the search as a report and use it in multiple dashboards as needed
Save the search as a dashboard panel for each dashboard that needs the data
Save the search as a dashboard panel for each dashboard that needs the data
Save the search as a scheduled alert and use it in multiple dashboards as needed
Save the search as a scheduled alert and use it in multiple dashboards as needed
Export the results of the search to an XML file and use the file as the basis of the dashboards
Export the results of the search to an XML file and use the file as the basis of the dashboards
Suggested answer: A
asked 23/09/2024
Flamur Kapaj
44 questions
Total 246 questions
Go to page: of 25