Download Splunk.SPLK-1001.Prep4Sure.2019-10-04.68q.tqb
| Vendor: | Splunk |
| Exam Code: | SPLK-1001 |
| Exam Name: | Splunk Core Certified User |
| Date: | Oct 04, 2019 |
| File Size: | 203 KB |
Demo Questions
Question 1
Which of the following is a Splunk search best practice?
- Filter as early as possible.
- Never specify more than one index.
- Include as few search terms as possible.
- Use wildcards to return more search results.
Correct answer: A
Question 2
When looking at a dashboard panel that is based on a report, which of the following is true?
- You can modify the search string in the panel, and you can change and configure the visualization.
- You can modify the search string in the panel, but you cannot change and configure the visualization.
- You cannot modify the search string in the panel, but you can change and configure the visualization.
- You cannot modify the search string in the panel, and you cannot change and configure the visualization.
Correct answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/WorkingWithDashboardPanels Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/WorkingWithDashboardPanels
Question 3
Which of the following is true about user account settings and preferences?
- Search & Reporting is the only app that can be set as the default application.
- Full names can only be changed by accounts with a Power User or Admin role.
- Time zones are automatically updated based on the setting of the computer accessing Splunk.
- Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
Correct answer: B
