[2024年04月] 最新のSplunk SPLK-1001認定練習テスト問題
確認済みSPLK-1001問題集と解答で一年間無料最速更新
質問 # 113
By default, which role contains the minimum permissions required to have write access to Splunk alerts?
- A. Alerting
- B. Admin
- C. User
- D. Power
正解：D
解説：
Explanation
The Power role contains the minimum permissions required to have write access to Splunk alerts. The User role can only view alerts created by others, but cannot create or modify them. The Alerting role is not a default role in Splunk, but a custom one that can be created by an administrator. The Admin role has write access to Splunk alerts, but also has many other permissions that are not necessary for alerting3.
質問 # 114
This clause is used to group the output of a stats command by a specific name.
- A. As
- B. Rex
- C. By
- D. List
正解：C
質問 # 115
How can search results be kept longer than 7 days?
- A. By creating a link to the job.
- B. By changing the job settings.
- C. By changing the time range picker to more than 7 days.
- D. By scheduling a report.
正解：B
質問 # 116
The better way of writing search query for index is:
- A. index=a index=b
- B. index = a, b
- C. index=(a & b)
- D. (index=a OR index=b)
正解：D
質問 # 117
It is not possible for a single instance of Splunk to manage the input, parsing and indexing of machine.
- A. True
- B. False
正解：B
質問 # 118
Which of the following is true about user account settings and preferences?
- A. Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
- B. Full names can only be changed by accounts with a Power User or Admin role.
- C. Time zones are automatically updated based on the setting of the computer accessing Splunk.
- D. Search & Reporting is the only app that can be set as the default application.
正解：B
質問 # 119
Which search matches the events containing the terms "error" and "fail"?
- A. index=security error OR fail
- B. index=security NOT error NOT fail
- C. index=security Error Fail
- D. index=security "error failure"
正解：C
解説：
Reference:
https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Search
質問 # 120
When running searches command modifiers in the search string are displayed in what color?
- A. Red
- B. Orange
- C. Blue
- D. Highlighted
正解：A
質問 # 121
What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?
- A. latest=-2hour@d
- B. earliest=-2hour@d
- C. latest=-2h
- D. earliest=-2h
正解：D
解説：
Explanation/Reference: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Search/Specifytimemodifiersinyoursearch
質問 # 122
Which command will rename action to Customer Action?
- A. | rename Action as "Customer Action"
- B. | rename Action to "Customer Action"
- C. | rename action = CustomerAction
- D. | rename action as "Customer Action"
正解：D
質問 # 123
Fields are searchable key value pairs in your event data.
- A. True
- B. False
正解：A
解説：
Explanation
質問 # 124
This function of the stats command allows you to return the sample standard deviation of a field.
- A. dev
- B. count deviation
- C. by standarddev
- D. stdev
正解：D
質問 # 125
Splunk extracts fields from event data at index time and at search time.
- A. True
- B. False
正解：A
質問 # 126
Universal forwarder is recommended for forwarding the logs to indexers.
- A. True
- B. False
正解：A
解説：
Explanation/Reference:
質問 # 127
At index time, in which field does Splunk store the timestamp value?
- A. timestamp
- B. EventTime
- C. time
- D. time
正解：B
質問 # 128
When saving a search directly to a dashboard panel instead of saving as a report first, which of the following is created?
- A. Inline panel
- B. Prebuilt panel
- C. Cloned panel
- D. Report panel
正解：D
解説：
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Search/Savingsearches
質問 # 129
What does the following specified time range do?
earliest=-72h@h latest=@d
- A. Look back 72 hours, up to the end of today
- B. Look back from 3 days ago up to the beginning of today
- C. Look back 72 hours up to one day ago
- D. Look back 3 days ago and prior
正解：C
質問 # 130
After running a search, what effect does clicking and dragging across the timeline have?
- A. Filters current search results.
- B. Executes a new search.
- C. Moves to past or future events.
- D. Expands the time range of the search.
正解：C
解説：
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Usethetimeline
質問 # 131
Which time range picker configuration would return real-time events for the past 30 seconds?
- A. Real-time - Earliest: 30-seconds ago, Latest: Now
- B. Advanced - Earliest: 30-seconds ago, Latest: Now
- C. Relative - Earliest: 30-seconds ago, Latest: Now
- D. Preset - Relative: 30-seconds ago
正解：A
解説：
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Selecttimerangestoapply
質問 # 132
How can results from a specified static lookup file be displayed?
- A. Settings > Lookups > Upload
- B. Settings > Lookups > Input
- C. lookupcommand
- D. inputlookupcommand
正解：D
解説：
Explanation/Reference: https://answers.splunk.com/answers/30376/how-to-display-the-contents-of-a-lookup-file.html
質問 # 133
Which search would return events from the access_combined sourcetype?
- A. Sourcetype=Access_Combined
- B. SOURCETYPE=access_combined
- C. sourcetype=Access_Combined
- D. Sourcetype=access_combined
正解：C
質問 # 134
......
SPLK-1001試験はオンラインで行われ、65問の多肢選択問題から構成されます。受験者はテストを完了するために90分間与えられます。この試験は、Splunk Coreの機能、検索言語、およびSplunkの導入に関する候補者の理解を評価します。また、受験者はレポート、ダッシュボード、アラート、およびナレッジオブジェクトの作成能力も評価されます。Splunk Coreは複雑なプラットフォームであり、SPLK-1001試験は、ツールを効果的かつ効率的に使用する候補者の能力をテストするために設計されています。
最新の2024年最新の実際に出ると確認されたSPLK-1001問題集で100%無料SPLK-1001試験問題集：https://jp.fast2test.com/SPLK-1001-premium-file.html