Question 1

What can be included in the All Fields option in the sidebar?

Options :

A : Dashboards

B : Metadata only

C : Non-interesting fields

D : Field descriptions

Answer: C

Question 2

What will always appear in the Selected Fields list?

Options :

A : index

B : action

C : clientip

D : sourcetype

Answer: D

Question 3

What kind of logs can Splunk Index?

Options :

A : Only A, B

B : Router and Switch Logs

C : Firewall and Web Server Logs

D : Only C

E : Database logs

F : All firewall, web server, database, router and switch logs

Answer: A

Question 4

Can you stop or pause the searching?

Options :

A : No

B : Yes

Answer: B

Question 5

Which of the following are Splunk premium enhanced solutions? (Choose three.)

Options :

A : Splunk User Behavior Analytics (UBA)

B : Splunk IT Service Intelligence (ITSI)

C : Splunk Enterprise Security (ES)

D : Splunk Analytics Security (AS)

Answer: A,B,C

Free SPLK-1001 Mock Exam – Practice Online Confidently