Splunk SPLK-1001 - Splunk Core Certified User Exam
Page: 3 / 43
Total 212 questions
Question #11 (Topic: Single Topic)
When running searches, command modifiers in the search string are displayed in what color?
A. Red
B. Blue
C. Orange
D. Highlighted
Answer: B
Question #12 (Topic: Single Topic)
Which of the following represents the Splunk recommended naming convention for dashboards?
A. Description_Group_Object
B. Group_Description_Object
C. Group_Object_Description
D. Object_Group_Description
Answer: C
Question #13 (Topic: Single Topic)
How can search results be kept longer than 7 days?
A. By scheduling a report.
B. By creating a link to the job.
C. By changing the job settings.
D. By changing the time range picker to more than 7 days.
Answer: A
Question #14 (Topic: Single Topic)
Which of the following is a Splunk search best practice?
A. Filter as early as possible.
B. Never specify more than one index.
C. Include as few search terms as possible.
D. Use wildcards to return more search results.
Answer: A
Question #15 (Topic: Single Topic)
When looking at a dashboard panel that is based on a report, which of the following is true?
A. You can modify the search string in the panel, and you can change and configure the visualization.
B. You can modify the search string in the panel, but you cannot change and configure the visualization.
C. You cannot modify the search string in the panel, but you can change and configure the visualization.
D. You cannot modify the search string in the panel, and you cannot change and configure the visualization.
Answer: C
