Exam (elaborations)
Splunk Core Certified User & Splunk Fundamentals 1 Exam Questions And Answers
- Course
- Institution
Splunk Core Certified User & Splunk Fundamentals 1 Exam Questions And Answers
[Show more]
Seller
Follow
Victorious23
Reviews received
Content preview
Splunk Core Certified User & SplunkFundamentals 1 Exam Questions And
Answers
Search requests are processed by the ___________. - -Indexers
- This role will only see their own knowledge objects and those that have
been shared with them.
A) User
B) Power
C) Admin - -A) User
- Which apps ship with Splunk Enterprise?
*(Select all that apply.)*
A) Home App
B) Sideview Utils
C) Search & Reporting
D) DB Connect - -A) Home App
C) Search & Reporting
- The default username and password for a newly installed Splunk instance
is:
A) username and password
B) admin and changeme
C) admin and 12345
D) buttercup and rawks - -B) admin and changeme
- Splunk knows where to break the event, where the time stamp is located
and how to automatically create field value pairs using these.
A) Line breaks
B) Source types
C) File names - -B) Source types
- Splunk uses ______________ to categorize the type of data being indexed. - -
sourcetype
- Which following search mode toggles behavior based on the type of search
being run?
,A) Smart
B) Fast
C) Verbose - -A) Smart
- T/F:
When zooming in on the event time line, a new search is run. - -False
- T/F:
These searches will return the same results...
failed password
failed AND password - -True
- A search job will remain active for _____ minutes after it is run.
A) 5
B) 10
C) 30
D) 60
E) 90 - -B) 10
- T/F:
Wildcards cannot be used with field searches. - -False
- T/F:
Field values are case sensitive. - -False
- Field names are ________.
*(Select all that apply.)*
A) Always capitalized.
B) Not important in Splunk.
C) Case sensitive.
D) Case insensitive. - -C) Case sensitive
- Having separate indexes allows:
*(Select all that apply.)*
A) Faster Searches.
B) Ability to limit access.
C) Multiple retention policies. - -A) Faster Searches.
B) Ability to limit access.
C) Multiple retention policies.
, - Which command removes results with duplicate field values?
A) Dedup
B) Limit
C) Join
D) Distinct - -A) Dedup
- What command would you use to *remove the status field* from the
returned events?
sourcetype=a* status=404 | ___________ status
A) table
B) fields -
C) not
D) fields - -B) fields -
- Which one of these is not a stats function?
A) Count
B) Avg
C) Addtotals
D) List
E) Sum - -C) Addtotals
- Which clause would you use to rename the count field?
sourcetype=vendor* | stats count __________ "Units Sold"
A) rename
B) to
C) as
D) show - -C) as
- How many results are shown by default when using a Top or Rare
Command? - -10
- Which stats function would you use to find the average value of a field? - -
average (or avg)
- If a search returns this, you can view the results as a *chart*.
A) A list.
B) Statistical values
C) Time limits.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Victorious23. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $16.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
83100 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now