Splunk Splunk Certifications SPLK-1001 Questions & Answers

• Question 81:

  ______________ is the default web port used by Splunk.

  A. 8089

  B. 8000

  C. 8080

  D. 443

  Correct Answer: B

• Question 82:

  Where does Licensing meter happen?

  A. Indexer

  B. Parsing

  C. Heavy Forwarder

  D. Input

  Correct Answer: A

• Question 83:

  Which command automatically returns percent and count columns when executing searches?

  A. top

  B. stats

  C. table

  D. percent

  Correct Answer: A

• Question 84:

  In the fields sidebar, which character denotes alphanumeric field values?

  A. #

  B. %

  C. a

  D. a#

  Correct Answer: B

• Question 85:

  Which Field/Value pair will return only events found in the index named security?

  A. index!=Security

  B. Index-security

  C. Index=Security

  D. index=Security

  Correct Answer: D

  The Kusto Query Language (KQL) is the language you use to query data in Azure Data Explorer [1]. To query for events that are found in the index named security, you would use the following KQL query:

  index=Security

  This query will return all events that are found in the security index. It is important to note that the "=" operator must be used in order to match the exact index name.

• Question 86:

  In the Splunk interface, the list of alerts can be filtered based on which characteristics?

  A. App, Owner, Severity, and Type

  B. App, Owner, Priority, and Status

  C. App, Dashboard, Severity, and Type

  D. App, Time Window, Type, and Severity

  Correct Answer: D

• Question 87:

  Which command is used to review the contents of a specified static lookup file?

  A. lookup

  B. csvlookup

  C. inputlookup

  D. outputlookup

  Correct Answer: C

• Question 88:

  By default, all users have DELETE permission to ALL knowledge objects.

  A. True

  B. False

  Correct Answer: B

• Question 89:

  Following are the time selection option while making search:

  (Choose all that apply.)

  A. Date and Time Range

  B. Advanced

  C. Date Range

  D. Presets

  E. Relative

  Correct Answer: B

• Question 90:

  How do you add or remove fields from search results?

  A. Use field +to add and field -to remove.

  B. Use table +to add and table -to remove.

  C. Use fields +to add and fields -to remove.

  D. Use fields Plus to add and fields Minus to remove.

  Correct Answer: C