Question 1

What is Splunk?

Options :

A : Splunk is a software platform to search, analyze and visualize the machine-generated data

B : Database management tool.

C : Security Information and Event Management (SIEM)

D : Cloud based application that help in analyzing logs.

Answer: A

Question 2

Which of the following constraints can be used with the top command?

Options :

A : limit

B : useperc

C : addtotals

D : fieldcount

Answer: A

Question 3

At the time of searching the start time is 03:35:08.

Will it look back to 03:00:00 if we use -30m@h in searching?

Options :

A : Yes

B : No

Answer: A

Question 4

How can search results be kept longer than 7 days?

Options :

A : By scheduling a report.

B : By creating a link to the job.

C : By changing the job settings.

D : By changing the time range picker to more than 7 days

Answer: A

Question 5

Forward Option gather and forward data to indexers over a receiving port from remote machines.

Options :

A : False

B : True

Answer: B

Free SPLK-1001 Mock Exam – Practice Online Confidently