Splunk

SPLK-1001 practice test

Practice with 15 free Testara sample questions, or choose paid access to the full 157-question bank.

Provider
Splunk
Question bank
157
Free sample
15 questions
Publisher
Testara

About this practice material

This page covers Testara's practice question bank for SPLK-1001, a certification listed under Splunk. Questions use original, exam-style scenarios and are not questions from the official certification exam.

Testara is an independent practice platform and is not affiliated with, endorsed by, or authorized by Splunk. The certification credential is issued by Splunk, not Testara. Certification and provider names belong to their respective owners.

Start practicing

The guest demo does not save an attempt. Sign in before buying access.

Try 15 questions free

Available without signing in

Free sample questions

These 15 questions and their explanations are server-rendered so you can inspect the material before opening the interactive demo.

  1. Question 1 · 1

    Which search string only returns events from hostWWW3?

    Choose one answer.

    • host=*
    • host=WWW3
    • host=WWW*
    • Host=WWW3
  2. Question 2 · 1

    When editing a dashboard, which of the following are possible options? (Choose all that apply.)

    Choose one answer.

    • Add an output.
    • Export a dashboard panel.
    • Modify the chart type displayed in a dashboard panel.
    • Drag a dashboard panel to a different location on the dashboard.
  3. Question 3 · 1

    Splunk shows data in __________________.

    Choose one answer.

    • ASCII Character order.
    • Reverse chronological order.
    • Alphanumeric order.
    • Chronological order.
  4. Question 4 · 1

    Which of the following can be used as wildcard search in Splunk?

    Choose one answer.

    • =
    • >
    • !
    • *
  5. Question 5 · 1

    What result will you get with following search index=test sourcetype="The_Questionnaire_P*" ?

    Choose one answer.

    • the_questionnaire _pedia
    • the_questionnaire pedia
    • the_questionnaire_pedia
    • the_questionnaire Pedia
  6. Question 6 · 1

    Prefix wildcards might cause performance issues.

    Choose true or false.

    • False
    • True
  7. Question 7 · 1

    Machine data can be in structured and unstructured format.

    Choose true or false.

    • False
    • True
  8. Question 8 · 1

    Field names are case sensitive.

    Choose true or false.

    • True
    • False
  9. Question 9 · 1

    Splunk internal fields contains general information about events and starts from underscore i.e. _ .

    Choose true or false.

    • True
    • False
  10. Question 10 · 1

    How many main user roles do you have in Splunk?

    Choose one answer.

    • 2
    • 4
    • 1
    • 3
  11. Question 11 · 1

    Which of the following are Splunk premium enhanced solutions? (Choose three.)

    Choose all answers that apply.

    • Splunk User Behavior Analytics (UBA)
    • Splunk IT Service Intelligence (ITSI)
    • Splunk Enterprise Security (ES)
    • Splunk Analytics Security (AS)
  12. Question 12 · 1

    When running searches, command modifiers in the search string are displayed in what color?

    Choose one answer.

    • Red
    • Blue
    • Orange
    • Highlighted
  13. Question 13 · 1

    Fields are searchable name and value pairings that differentiates one event from another.

    Choose true or false.

    • False
    • True
  14. Question 14 · 1

    Field values are case sensitive.

    Choose true or false.

    • True
    • False
  15. Question 15 · 1

    ______________ is the default web port used by Splunk.

    Choose one answer.

    • 8089
    • 8000
    • 8080
    • 443

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.

Starter

$29 USD one time

Full access to one certification's question bank in standard practice mode for 60 days.

  • Full question bank for one certification
  • 60 days of access
  • Standard practice mode
  • Question notes and community discussions
  • Attempt scores and answer review

Professional

$49 USD one time

Full access to one certification's question bank, custom test controls and advanced analytics for 60 days.

  • Custom test builder
  • Timers and question selection
  • Randomized question and answer order
  • Advanced performance and weak-question analytics
  • Priority customer support
Try 15 questions free