Splunk Splunk Certifications SPLK-2001 Questions & Answers

• Question 31:

  Consider the following Python code snippet used in a Splunk add-on:

  if not os.path.exists(full_path): self.doAction(full_path, header) else: f = open(full_path) oldORnew = f.readline().split(",") f.close()

  An attacker could create a denial of service by causing an error in either the open() or readline() commands. What type of vulnerability is this?

  A. CWE-693: Protection Mechanism Failure

  B. CWE-562: Return of Stack Variable Address

  C. CWE-404: Improper Resource Shutdown or Release

  D. CWE-636: Not Failing Securely (`Failing Open')

  Correct Answer: C

  Reference: https://dev.splunk.com/enterprise/docs/developapps/testvalidate/securitybestpractices/

• Question 32:

  Which of the following are requirements for arguments sent to the data/indexes endpoint? (Select all that apply.)

  A. Be url-encoded.

  B. Specify the datatype.

  C. Include the bucket path.

  D. Include the name argument.

  Correct Answer: BD

• Question 33:

  When using the Splunk REST API, which of the following containers is/are included in the Atom Feed response? (Select all that apply.)

  A.

  B.

  C.

  D.

  Correct Answer: BC

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing

• Question 34:

  Which of the following Simple XML elements configure panel link buttons? (Select all that apply.)

  A.

  B. true

  C. false

  D. false

  Correct Answer: AB

  Reference: https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/DrilldownLinkToURL

• Question 35:

  Which of the following endpoints is used to authenticate with the Splunk REST API?

  A. /services/auth/login

  B. /services/session/login

  C. /services/auth/session/login

  D. /servicesNS/authentication/login

  Correct Answer: A

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing

• Question 36:

  Which of these URLs could be used to construct a REST request to search the employee KV store collection to find records with a rating greater than or equal to 2 and less than 5?

  A. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={$and: [{rating:{$gte:2}},{rating:{$lt:5}}]}andoutput_mode-json'

  B. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={$and: [{rating:$gte:2}},{rating:{$lt:5}}]}andoutput_mode=json'

  C. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={% 22rating%22:{%22$gte%22:2}},{%22$and%22},{%22rating%22:{%22$lt%22:5}}} andoutput_mode=json'

  D. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={%22$and %22:[{%22rating%22:{%22$gte%22:2}},{%22rating%22:{%22$lt%22:5}}]} andoutput_mode=json'

  Correct Answer: C

• Question 37:

  Which of the following log files contains logs that are most relevant to Splunk Web?

  A. audit.log

  B. metrics.log

  C. splunkd.log

  D. web_service.log

  Correct Answer: D

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Troubleshooting/ WhatSplunklogsaboutitself

• Question 38:

  Place content to set on page load inside which of the following Simple XML tags?

  A.

  B.

  C.

  D.

  Correct Answer: C

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Viz/tokens

• Question 39:

  Which of the following are reserved field names in a KV Store? (Select all that apply.)

  A. _key

  B. _time

  C. _user

  D. _source

  Correct Answer: BC

  Reference: https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/kvstore/ aboutkvstorecollections/

• Question 40:

  Which of the following are types of event handlers? (Select all that apply.)

  A. Search

  B. Set token

  C. Form input

  D. Visualization

  Correct Answer: CD

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Viz/EventHandlerReference