Free Splunk Core Certified User Practice Questions

A.  

True

B.  

False

A.  

Description_Group_Object

B.  

Group_Description_Object

C.  

Group_Object_Description

D.  

Object_Group_Description

A.  

Table

B.  

Raw

C.  

Pie Chart

D.  

List

A.  

To group the results by one or more fields.

B.  

To compute numerical statistics on each field.

C.  

To specify how the values in a list are delimited.

D.  

To partition the input data based on the split-by fields.

A.  

No

B.  

Yes

A.  

Inherent entities that exist in event data.

B.  

A searchable key/value pair in event data.

C.  

Values pulled exclusively from lookup tables.

D.  

A non-searchable name/value pair used while indexing data.

A.  

Executes a new search.

B.  

Filters current search results.

C.  

Moves to past or future events.

D.  

Expands the time range of the search.

A.  

Auto-detect changes in performance

B.  

Auto-generated PDF reports of overall data trends

C.  

Regularly scheduled archiving to keep disk space use low

D.  

Triggering an alert in your Splunk instance when certain conditions are met

A.  

Splunk Enterprise Security Suite

B.  

Searching and Reporting

C.  

Reporting and Searching

D.  

Splunk apps for Security

A.  

Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field

B.  

Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

C.  

Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

D.  

The selected field and its corresponding values will appear underneath the events in the search results