Splunk SPLK-1001 Actual Questions

Splunk Core Certified User Exam Questions and Answers

Question 49

Which of the following reports is available in the Fields window?

Top values by time

Rare values by time

Events with top value fields

Events with rare value fields

Question 50

Field values are case sensitive.

True

False

Question 51

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

No events will be returned.

Splunk will prompt you to specify an index.

All non-indexed events to which the user has access will be returned.

Events from every index searched by default to which the user has access will be returned.

Question 52

When looking at a dashboard panel that is based on a report, which of the following is true?

You can modify the search string in the panel, and you can change and configure the visualization.

You can modify the search string in the panel, but you cannot change and configure the visualization.

You cannot modify the search string in the panel, but you can change and configure the visualization.

You cannot modify the search string in the panel, and you cannot change and configure the visualization.