Uploaded by fmz50994


Splunk Core Certified Power User Exam
Web: www.exactinside.com
Version: Demo
Email: support@exactinside.com
[ Total Questions: 10]
We have developed quality product and state-of-art service to ensure our customers interest. If you have any
suggestions, please feel free to contact us at feedback@exactinside.com
If you have any questions about our product, please provide the following items:
exam code
screenshot of the question
login id/email
please contact us at support@exactinside.com and our technical experts will provide support within 24 hours.
The product of each order has its own encryption code, so you should use it independently. Any unauthorized
changes will inflict legal punishment. We reserve the right of final explanation for this statement.
Exact Questions
Splunk - SPLK-1002
Exam Topic Breakdown
Exam Topic
Number of Questions
Topic 1 : Questions Set 1
Topic 2 : Questions Set 2
Find Everything , Exactly in your Exam
1 of 5
Exact Questions
Splunk - SPLK-1002
Topic 1, Questions Set 1
Question #:1 - (Exam Topic 1)
What does the Splunk Common Information Model (CIM) add-on include? (select all that apply)
A. Custom visualizations
B. Pre-configured data models
C. Fields and event category tags
D. Automatic data model acceleration
Answer: B C
Question #:2 - (Exam Topic 1)
When performing a regular expression (regex) field extraction using the Field Extractor (FX), what happens
when the require option is used?
A. The regex can no longer be edited.
B. The field being extracted will be required for all future events.
C. The events without the required field will not display in searches.
D. Only events with the required string will be included in the extraction.
Answer: D
Question #:3 - (Exam Topic 1)
To identify all of the contributing events within a transaction that contains at least one REJECT event, which
syntax is correct?
A. Index-main | REJECT trans sessionid
B. Index-main | transaction sessionid | search REJECT
C. Index=main | transaction sessionid | whose transaction=reject
D. Index=main | transaction sessionid | where transaction=reject’’
Answer: B
Find Everything , Exactly in your Exam
2 of 5
Exact Questions
Splunk - SPLK-1002
Question #:4 - (Exam Topic 1)
What do events in a transaction have In common?
A. All events In a transaction must have the same timestamp.
B. All events in a transaction must have the same sourcetype.
C. All events in a transaction must have the exact same set of fields.
D. All events in a transaction must be related by one or more fields.
Answer: D
Question #:5 - (Exam Topic 1)
Which one of the following statements about the search command is true?
A. It does not allow the use of wildcards.
B. It treats field values in a case-sensitive manner.
C. It can only be used at the beginning of the search pipeline.
D. It behaves exactly like search strings before the first pipe.
Answer: D
Find Everything , Exactly in your Exam
3 of 5
Exact Questions
Splunk - SPLK-1002
Topic 2, Questions Set 2
Question #:6 - (Exam Topic 2)
When using | timchart by host, which filed is representted in the x-axis?
A. date
B. host
C. time
D. -time
Answer: A
Question #:7 - (Exam Topic 2)
A report scheduled to run every 15 mins. but takes 17 mins. to complete is in danger of being_____.
A. skipped or deferred
B. automatically accelerated
C. deleted
D. all of the above
Answer: A
Question #:8 - (Exam Topic 2)
The stats command will create a _____________ by default.
A. Table
B. Report
C. Pie chart
Answer: A
Question #:9 - (Exam Topic 2)
When using the transaction command, what does the argument maxspan do?
Find Everything , Exactly in your Exam
4 of 5
Exact Questions
Splunk - SPLK-1002
A. Sets the maximum total time between events in a transaction.
B. Sets the maximum length of all events within a transaction.
C. Sets the maximum total time between the earliest and latest events in a transaction.
D. Sets the maximum length that any single event can reach to be included in the transaction.
Answer: C
Question #:10 - (Exam Topic 2)
When a search returns __________, you can view the results as a list.
A. a list of events
B. transactions
C. statistical values
Answer: C
Find Everything , Exactly in your Exam
5 of 5
About exactinside.com
exactinside.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam
Questions, Study Guides, Practice Tests.
We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially
Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on.
View list of all certification exams: All vendors
We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed
Sales: sales@exactinside.com
Feedback: feedback@exactinside.com
Support: support@exactinside.com
Any problems about IT certification or our products, You can write us back and we will get back to you within 24