SPLK-1002 practice questions 71–80

1. Question 71 · 226 in bank

   When using the timechart command, how can a user group the events into buckets based on time?

   • AUsing the span argument.
   • BUsing the duration argument.
   • CUsing the interval argument.
   • DAdjusting the fieldformat options.

   Show answer

   Answer: A

   Next question

2. Question 72 · 226 in bank

   Which of the following statements about data models and pivot are true? (Choose all that apply.)

   • AThey are both knowledge objects.
   • BData models are created out of datasets called pivots.
   • CPivot requires users to input SPL searches on data models.
   • DPivot allows the creation of data visualizations that present different aspects of a data model.

   Show answer

   Answer: D

   Next question

3. Question 73 · 226 in bank

   Data model fields can be added using the Auto-Extracted method. Which of the following statements describe Auto-Extracted fields? (Choose all that apply.)

   • AAuto-Extracted fields can be hidden in Pivot.
   • BAuto-Extracted fields can have their data type changed.
   • CAuto-Extracted fields can be given a friendly name for use in Pivot.
   • DAuto-Extracted fields can be added if they already exist in the dataset with constraints.

   Show answer

   Answer: B

   Next question

4. Question 74 · 226 in bank

   Which type of visualization shows relationships between discrete values in three dimensions?

   • APie chart
   • BLine chart
   • CBubble chart
   • DScatter chart

   Show answer

   Answer: C

   Next question

5. Question 75 · 226 in bank

   Which of the following is a function of the Splunk Common Information Model (CIM)?

   • ANormalizing data across a Splunk deployment.
   • BProviding templates for reports and dashboards.
   • CAlgorithmically shifting events to other indexes.
   • DReingesting previously indexed data with new field names.

   Show answer

   Answer: A

   Next question

6. Question 76 · 226 in bank

   What information must be included when using the datamodel command?

   • Astatus field
   • BMultiple indexes
   • CData model field name.
   • DData model dataset name.

   Show answer

   Answer: D

   Next question

7. Question 77 · 226 in bank

   Select 3

   Which of the following workflow actions can be executed from search results? (Choose all that apply.)

   • AGET
   • BPOST
   • CLOOKUP
   • DSearch

   Show answer

   Answer: ABD

   Next question

8. Question 78 · 226 in bank

   Which of the following eval command functions is valid?

   • Aint()
   • Bcount()
   • Cprint()
   • Dtostring()

   Show answer

   Answer: D

   Next question

9. Question 79 · 226 in bank

   A calculated field may be based on which of the following?

   • ALookup tables
   • BExtracted fields
   • CRegular expressions
   • DFields generated within a search string

   Show answer

   Answer: B

   Next question

10. Question 80 · 226 in bank

    A data model can consist of what three types of datasets?

    • APivot, searches, and events.
    • BPivot, events, and transactions.
    • CSearches, transactions, and pivot.
    • DEvents, searches, and transactions.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SPLK-1002 practice, question 71. 226 questions available.