SPLK-1001 Practice Test

SPLK-1001 Practice Test practice questions, page 4 of 9, with answer review and explanations.

Question 16

Which of the following are common constraints of the top command?

  1. limit, count
  2. limit, showpercent
  3. limits, countfield
  4. showperc, countfield

Question 17

When displaying results of a search, which of the following is true about line charts?

  1. Line charts are optimal for single and multiple series.
  2. Line charts are optimal for single series when using Fast mode.
  3. Line charts are optimal for multiple series with 3 or more columns.
  4. Line charts are optimal for multiseries searches with at least 2 or more columns.

Question 18

How are events displayed after a search is executed?

  1. In chronological order.
  2. Randomly by default.
  3. In reverse chronological order.
  4. Alphabetically according to field name.

Question 19

Which of the following is true about user account settings and preferences?

  1. Search & Reporting is the only app that can be set as the default application.
  2. Full names can only be changed by accounts with a Power User or Admin role.
  3. Time zones are automatically updated based on the setting of the computer accessing Splunk.
  4. Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

Question 20

What is a primary function of a scheduled report?

  1. Auto-detect changes in performance.
  2. Auto-generated PDF reports of overall data trends.
  3. Regularly scheduled archiving to keep disk space use low.
  4. Triggering an alert in your Splunk instance when certain conditions are met.