Question 1

What is Splunk?

Options :

A : Splunk is a software platform to search, analyze and visualize the machine-generated data

B : Database management tool.

C : Security Information and Event Management (SIEM)

D : Cloud based application that help in analyzing logs.

Answer: A

Question 2

Which of the following is a best practice when writing a search string?

Options :

A : Include all formatting commands before any search terms

B : Include at least one function as this is a search requirement

C : Include the search terms at the beginning of the search string

D : Avoid using formatting clauses as they add too much overhead

Answer: A

Question 3

Which component of Splunk is primarily responsible for saving data?

Options :

A : Search Head

B : Heavy Forwarder

C : Indexer

D : Universal Forwarder

Answer: C

Question 4

Forward Option gather and forward data to indexers over a receiving port from remote machines.

Options :

A : False

B : True

Answer: B

Question 5

What are the three main Splunk components?

Options :

A : Search head, GPU, streamer

B : Search head, indexer, forwarder

C : Search head, SQL database, forwarder

D : Search head, SSD, heavy weight agent

Answer: B

Higher Test Marks with Free Online SPLK-1001 Exam Practice