Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Splunk Core Certified Power User Exam Practice Questions

Question # 31

This function of the stats command allows you to return the sample standard deviation of a field.

Options:

A.  

stdev

B.  

dev

C.  

count deviation

D.  

by standarddev

Discussion 0
Question # 32

The eval command 'if' function requires the following three arguments (in order):

Options:

A.  

Boolean expression, result if true, result if false

B.  

Result if true, result if false, boolean expression

C.  

Result if false, result if true, boolean expression

D.  

Boolean expression, result if false, result if true

Discussion 0
Question # 33

What are the expected results for a search that contains the command | where A=B?

Options:

A.  

Events that contain the string value where A=

B.  

B.  

Events that contain the string value A=

B.  

C.  

Events where values of field are equal to values of field

B.  

D.  

Events where field A contains the string value

B.  

Discussion 0
Question # 34

How are event types different from saved reports?

Options:

A.  

Event types cannot be used to organize data into categories.

B.  

Event types include formatting of the search results.

C.  

Event types can be shared with Splunk users and added to dashboards.

D.  

Event types do not include a time range.

Discussion 0
Question # 35

Which of the following does not describe how to create an event type?

Options:

A.  

Run a search string and use the Save As button.

B.  

Use the New Event Type button from the Settings menu.

C.  

Use the Field Extractor to analyze and use the Save As button.

D.  

Select search criteria within the Event Type Builder.

Discussion 0
Question # 36

A data model can consist of what three types of datasets?

Options:

A.  

Pivot, searches, and events.

B.  

Pivot, events, and transactions.

C.  

Searches, transactions, and pivot.

D.  

Events, searches, and transactions.

Discussion 0
Question # 37

Which are valid ways to create an event type? (select all that apply)

Options:

A.  

By using the searchtypes command in the search bar.

B.  

By editing the event_type stanza in the props.conf file.

C.  

By going to the Settings menu and clicking Event Types > New.

D.  

By selecting an event in search results and clicking Event Actions > Build Event Type.

Discussion 0
Question # 38

Which syntax will find events where the values for the 1 field match the values for the Renewal-MonthYear field?

Options:

A.  

| where 10yearAnnerversary=Renewal-MonthYear

B.  

| where ‘10yearAnnerversary=Renewal-MonthYear

C.  

| where 10yearAnnerversary=’Renewal-MonthYear’

D.  

| where ‘10yearAnnerversary’=’Renewal-MonthYear’

Discussion 0
Question # 39

Which of the following knowledge objects can reference field aliases?

Options:

A.  

Calculated fields, lookups, event types, and tags.

B.  

Calculated fields and tags only.

C.  

Calculated fields and event types only.

D.  

Calculated fields, lookups, event types, and extracted fields.

Discussion 0
Question # 40

Which of the following searches will return events containing a tag named Privileged?

Options:

A.  

tag=Priv

B.  

tag=Priv*

C.  

tag=priv*

D.  

tag=privileged

Discussion 0

SPLK-1002 PDF

SPLK-1002 PDF (Printable)
$46.5
$154.99

SPLK-1002 Testing Engine

SPLK-1002 PDF (Printable)
$51
$169.99

SPLK-1002 PDF + Testing Engine

SPLK-1002 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions