SPLK-1002 Practice Questions

A.  

stdev

B.  

dev

C.  

count deviation

D.  

by standarddev

A.  

Boolean expression, result if true, result if false

B.  

Result if true, result if false, boolean expression

C.  

Result if false, result if true, boolean expression

D.  

Boolean expression, result if false, result if true

A.  

Events that contain the string value where A=

B.  

B.  

Events that contain the string value A=

B.  

C.  

Events where values of field are equal to values of field

B.  

D.  

Events where field A contains the string value

B.  

A.  

Event types cannot be used to organize data into categories.

B.  

Event types include formatting of the search results.

C.  

Event types can be shared with Splunk users and added to dashboards.

D.  

Event types do not include a time range.

A.  

Run a search string and use the Save As button.

B.  

Use the New Event Type button from the Settings menu.

C.  

Use the Field Extractor to analyze and use the Save As button.

D.  

Select search criteria within the Event Type Builder.

A.  

Pivot, searches, and events.

B.  

Pivot, events, and transactions.

C.  

Searches, transactions, and pivot.

D.  

Events, searches, and transactions.

A.  

By using the searchtypes command in the search bar.

B.  

By editing the event_type stanza in the props.conf file.

C.  

By going to the Settings menu and clicking Event Types > New.

D.  

By selecting an event in search results and clicking Event Actions > Build Event Type.

A.  

| where 10yearAnnerversary=Renewal-MonthYear

B.  

| where ‘10yearAnnerversary=Renewal-MonthYear

C.  

| where 10yearAnnerversary=’Renewal-MonthYear’

D.  

| where ‘10yearAnnerversary’=’Renewal-MonthYear’

A.  

Calculated fields, lookups, event types, and tags.

B.  

Calculated fields and tags only.

C.  

Calculated fields and event types only.

D.  

Calculated fields, lookups, event types, and extracted fields.

A.  

tag=Priv

B.  

tag=Priv*

C.  

tag=priv*

D.  

tag=privileged