SPLK-2001 Free Practice Test

Which of the following is an example of a valid syntax for specifying an absolute time range modifier in a search?

1. A. earliest=01/01/2019:00:00:00
2. B. earliest=01/01/2019T00:00:00
3. C. earliest=2019-01-01 00:00:00
4. D. earliest=2019-01-01T00:00:00

Correct Answer: A

Which of the following endpoints is used to authenticate with the Splunk REST API?

1. A. /services/auth/login
2. B. /services/session/login
3. C. /services/auth/session/login
4. D. /servicesNS/authentication/login

Correct Answer: A

When using the Splunk REST API, which of the following containers is/are included in the Atom Feed response? (Select all that apply.)

1. A. <feed>
2. B.
3. C.
4. D.

Correct Answer: BC

When updating a knowledge object via REST, which of the following are valid values for the sharing Access Control List property?

1. A. App
2. B. User
3. C. Global
4. D. Nobody

Correct Answer: A

Which of the following are security best practices for Splunk app development? (Select all that apply.)

1. A. Store passwords in clear text in .conf files.
2. B. Implement security in software development lifecycle.
3. C. Manually test application with the controls listed in the OWASP Security Testing Guide.
4. D. Use a dynamic scanner such as OWASP ZAP to scan web application components for vulnerabilities.

Correct Answer: CD