SPLK-1002 Free Practice Test

- (Exam Topic 1)
Which of the following can be used with the eval command tostring function (select all that apply)

1. A. ‘’hex’’
2. B. ‘’commas’’
3. C. ‘’Decimal’’
4. D. ‘’duration’’

Correct Answer: ABD

- (Exam Topic 1)
Data model are composed of one or more of which of the fo-owing datasets? (select all that apply.)

1. A. Events datasets
2. B. Search datasets
3. C. Transaction datasets
4. D. Any child of event, transaction, and search datasets

Correct Answer: ABC

- (Exam Topic 2)
Which of the following are valid options to speed up reports? (Select all the apply.)

1. A. Edit permissions
2. B. Edit description
3. C. Edit acceleration
4. D. Edit schedule

Correct Answer: C

- (Exam Topic 1)
What are the two parts of a root event dataset?

1. A. Fields and variables.
2. B. Fields and attributes.
3. C. Constraints and fields.
4. D. Constraints and lookups.

Correct Answer: C

- (Exam Topic 2)
Which is not a comparison operator in Splunk

1. A. <=
2. B. =
3. C. !=
4. D. >
5. E. ?=

Correct Answer: E