Free Splunk SPLK-1001 Demo Questions

Question #1 (Topic: Demo Questions)

Splunk extracts fields from event data at index time and at search time.

A. True

B. False

Correct Answer: A

Explanation:
[Reference: https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchTutorial/Usefieldstosearch, , ]

Question #2 (Topic: Demo Questions)

Which search will return the 15 least common field values for the dest_ip field?

A.

sourcetype=firewall | rare num=15 dest_ip

B.

sourcetype=firewall | rare last=15 dest_ip

C.

sourcetype=firewall | rare count=15 dest_ip

D.

sourcetype=firewall | rare limit=15 dest_ip

Correct Answer: C

Explanation:

[Reference: https://answers.splunk.com/answers/41928/add-a-lookup-csv-colum-information-to-the-results-ofa-inputlookup-search.html, ]

Question #3 (Topic: Demo Questions)

Which of the statements are correct? (Choose three.)

A.

Zoom to selection: Narrows the time range and re-executes the search.

B.

Zoom to selection: Narrows the time range and doesn ' t re-executes the search.

C.

Format Timeline: Hides or shows the timeline in different views.

D.

Zoom-Out: Expands the time focus and doesn ' t re-executes the search.

E.

Zoom-out: Expands the time focus and re-executes the search.

Correct Answer: A, C, E

Question #4 (Topic: Demo Questions)

What determines the scope of data that appears in a scheduled report?

A.

All data accessible to the User role will appear in the report.

B.

All data accessible to the owner of the report will appear in the report.

C.

All data accessible to all users will appear in the report until the next time the report is run.

D.

The owner of the report can configure permissions so that the report uses either the User role or the owner’s profile at run time.

Correct Answer: D

Question #5 (Topic: Demo Questions)

What is Splunk?

A.

Splunk is a software platform to search, analyze and visualize the machine-generated data.

B.

Database management tool.

C.

Security Information and Event Management (SIEM).

D.

Cloud based application that help in analyzing logs.

Splunk Core Certified User SPLK-1001 Exam Questions

Correct Answer: A

Correct Answer: C

Correct Answer: A, C, E

Correct Answer: D

Correct Answer: A