[Oct-2021] Verified Splunk Exam Dumps with SPLK-1002 Exam Study Guide
Best Quality Splunk SPLK-1002 Exam Questions BraindumpsPass Realistic Practice Exams [2021]
NEW QUESTION 14
Which of the following statements describes POST workflow actions?
- A. POST workflow actions can be configured to send email to the URI location.
- B. Configuration of a POST workflow action includes choosing a sourcetype.
- C. By default, POST workflow actions are shown in both the event and field menus.
- D. POST workflow actions can be configured to send POST arguments to the URI location.
Answer: D
Explanation:
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/SetupaPOSTworkflowaction
NEW QUESTION 15
When using the Field Extractor (FX), which of the following delimiters will work? (select all that apply)
- A. Spaces
- B. Pipes
- C. Colons
- D. Tabs
Answer: A,B,D
NEW QUESTION 16
To identify all of the contributing events within a transaction that contains at least one REJECT event, which syntax is correct?
- A. Index-main | REJECT trans sessionid
- B. Index=main | transaction sessionid | where transaction=reject''
- C. Index-main | transaction sessionid | search REJECT
- D. Index=main | transaction sessionid | whose transaction=reject
Answer: C
NEW QUESTION 17
An alert does not have to trigger every time it generates search results.
- A. True
- B. False
Answer: A
NEW QUESTION 18
When using the timechart command, how can a user group the events into buckets based on time?
- A. Adjusting the fieldformat options.
- B. Using the duration argument.
- C. Using the interval argument.
- D. Using the span argument.
Answer: D
NEW QUESTION 19
Data model fields can be added using the Auto-Extracted method. Which of the following statements describe Auto-Extracted fields? (select all that apply)
- A. Auto-Extracted fields can be hidden in Pivot.
- B. Auto-Extracted fields can have their data type changed.
- C. Auto-Extracted fields can be added if they already exist in the dataset with constraints.
- D. Auto-Extracted fields can be given a friendly name for use in Pivot.
Answer: B
NEW QUESTION 20
Which of the following searches will return events contains a tag name Privileged?
- A. Tag= Priv
- B. Tag= Pri*
- C. Tag= Privileged
- D. Tag= Priv*
Answer: B
Explanation:
Reference:https://docs.splunk.com/Documentation/PCI/4.1.0/Install/PrivilegedUserActivity
NEW QUESTION 21
Which of the following are not true about lookups? (Select all that apply.)
- A. Output from a script can be used to populate a lookup table
- B. Search results can be used to populate a lookup table
- C. Lookups can be time based
- D. Lookup have a 10mg maximum size limit
- E. Splunk DB Connect can be used to populate a lookup table from relational databases
Answer: D
NEW QUESTION 22
What does the following search do?
- A. Creates a table of the total count of users and split by corndogs.
- B. Creates a table of the total count of mysterymeat corndogs split by user.
- C. Creates a table that groups the total number of users by vegetarian corndogs.
- D. Creates a table with the count of all types of corndogs eaten split by user.
Answer: A
NEW QUESTION 23
Which of the following searches would create a graph similar to the one below?
- A. index_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status maxspan-id | chart count states by -time
- B. index_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status maxspan-id | start count states
- C. index_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status maxspan-id | timechart count by status
- D. None of these searches would generate a similart graph.
Answer: B
NEW QUESTION 24
What does the following search do?
- A. Creates a table of the total count of users and split by corndogs.
- B. Creates a table that groups the total number of users by vegetarian corndogs.
- C. Creates a table with the count of all types of corndogs eaten split by user.
- D. Creates a table of the total count of mysterymeat corndogs split by user.
Answer: D
NEW QUESTION 25
Which of the following statements describes POST workflow actions?
- A. POST workflow actions cannot use field values in their URI.
- B. POST workflow actions cannot be created on custom sourcetypes.
- C. POST workflow actions are always encrypted.
- D. POST workflow actions can open a web page in either the same window or a new .
Answer: D
NEW QUESTION 26
Which of the following statements describe calculated fields? (select all that apply)
- A. Calculated fields can be used in the search bar.
- B. Calculated fields are shortcuts for performing calculations using the eval command.
- C. Calculated fields can be based on an extracted field.
- D. Calculated fields can only be applied to host and sourcetype.
Answer: B,C
NEW QUESTION 27
What is the correct syntax to search for a tag associated with a value on a specific fiedsd?
- A. Tag-<field?
- B. Tag<filed(tagname.)
- C. Tag=<filed>::<tagname>
- D. Tag::<filed>=<tagname>
Answer: D
NEW QUESTION 28
The timechart command buckets data in time intervals depending on:
- A. the number of events returned
- B. the selected time range
- C. the type of visualization selected
Answer: B
NEW QUESTION 29
A user wants to convert numeric field values to strings and also to sort on those values.
Which command should be used first, theevalor thesort?
- A. It doesn't matter whether eval or sort is used first.
- B. Convert the numeric to a string with eval first, then sort.
- C. Use sort first, then convert the numeric to a string with eval.
- D. You cannot use the sort command and the eval command on the same field.
Answer: C
NEW QUESTION 30
In which Settings section are macros defined?
- A. Searches, Reports, Alerts
- B. Fields
- C. Advanced Search
- D. Tokens
Answer: C
NEW QUESTION 31
Which of the following statements describes POST workflow actions?
- A. POST workflow actions can be configured to send POST arguments to the URI location.
- B. POST workflow actions can be configured to send email to the URI location.
- C. Configuration of a POST workflow action includes choosing a sourcetype.
- D. By default, POST workflow actions are shown in both the event and field menus.
Answer: D
Explanation:
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/SetupaPOSTworkflowaction
NEW QUESTION 32
......
Authentic Best resources for SPLK-1002: https://www.braindumpspass.com/Splunk/SPLK-1002-practice-exam-dumps.html
SPLK-1002 Test Engine Practice Exam: https://drive.google.com/open?id=1SGLHOonCUCMJNVuhW5N33ua_EtYqkEm-
