Download Splunk.SPLK-1001.Pass4Sure.2020-02-07.89q.tqb
| Vendor: | Splunk |
| Exam Code: | SPLK-1001 |
| Exam Name: | Splunk Core Certified User |
| Date: | Feb 07, 2020 |
| File Size: | 259 KB |
Demo Questions
Question 1
Which of the following Splunk components typically resides on the machines where data originates?
- Indexer
- Forwarder
- Search head
- Deployment server
Correct answer: B
Question 2
What determines the scope of data that appears in a scheduled report?
- All data accessible to the User role will appear in the report.
- All data accessible to the owner of the report will appear in the report.
- All data accessible to all users will appear in the report until the next time the report is run.
- The owner of the report can configure permissions so that the report uses either the User role or the owner’s profile at run time.
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Managereportpermissions Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Managereportpermissions
Question 3
Select the answer that displays the accurate placing of the pipe in the following search string:
index=security sourcetype=access_* status=200 stats count by price
- index=security sourcetype=access_* status=200 stats | count by price
- index=security sourcetype=access_* status=200 | stats count by price
- index=security sourcetype=access_* status=200 | stats count | by price
- index=security sourcetype=access_* | status=200 | stats count by price
Correct answer: B
