SPLK-1002練習テスト問題解答には更新された179問があります
SPLK-1002問題集はSplunk Core Certified Power User合格確定させる練習で179問があります
質問 82
When using | timchart by host, which filed is representted in the x-axis?
- A. time
- B. date
- C. host
- D. -time
正解: B
質問 83
__________ datasets can be added to root dataset to narrow down the search
- A. event
- B. extracted
- C. child
- D. parent
正解: C
質問 84
When should you use the transaction command instead of the scats command?
- A. When you need to group on multiple values.
- B. When duration is irrelevant in search results. .
- C. When you need to group based on start and end constraints.
- D. When you have over 1000 events in a transaction.
正解: C
質問 85
Based on the macro definition shown below, what is the correct way to execute the macro in a search string?
- A. Convert_sales ($euro, $€$,S,79$)
- B. Convert_sales (euro, €, 79)"
- C. Convert_sales ($euro,$€$,s79$
- D. Convert_sales (euro, €, .79)
正解: D
質問 86
In what order arc the following knowledge objects/configurations applied?
- A. Field Aliases, Field Extractions, Lookups
- B. Field Extractions, Field Aliases, Lookups
- C. Lookups, Field Aliases, Field Extractions
- D. Field Extractions, Lookups, Field Aliases
正解: D
解説:
Reference:
https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/WhatisSplunkknowledge
質問 87
What do events in a transaction have in common?
- A. All events in a transaction must have the exact same set of fields.
- B. All events in a transaction must have the same sourcetype.
- C. All events in a transaction must have the same timestamp.
- D. All events in a transaction must be related by one or more fields.
正解: B
解説:
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Abouttransactions
質問 88
Which of the following searches will return events containing a tag named Privileged?
- A. tag=Priv*
- B. tag=privileged
- C. tag=priv*
- D. tag=Priv
正解: B
解説:
Explanation/Reference: https://docs.splunk.com/Documentation/PCI/4.1.0/Install/PrivilegedUserActivity
質問 89
Which of the following statements about tags is true? (select all that apply.)
- A. Tags are based on field/vale pairs.
- B. Tags are case-insensitive.
- C. Tags categorize events based on a search.
- D. Tags are designed to make data more understandable.
正解: B
質問 90
Which of the following can be used with the eval command tostring function (select all that apply)
- A. ''Decimal''
- B. ''commas''
- C. ''hex''
- D. ''duration''
正解: B,C,D
解説:
Reference:https://splunkonbigdata.com/2018/10/27/usage-of-splunk-eval-function-tostring/
質問 91
Which of these search strings is NOT valid:
- A. index=web status=5-* | chart count by host, status
- B. index=web status=50* | chart count over host by status
- C. index=web status=50* | chart count over host, status
正解: B
質問 92
It is not possible for a single instance of Splunk to manage the input, parsing and indexing of machine.
- A. False
- B. True
正解: A
質問 93
What is the correct syntax to search for a tag associated with a value on a specific field?
- A. tag=<field>::<tagname>
- B. tag=<field>(<tagname>)
- C. tag=<field>
- D. tag::<field>=<tagname>
正解: D
解説:
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/ TagandaliasfieldvaluesinSplunkWeb
質問 94
Which of the following searches would return a report of sales by product-name?
- A. chart sales by product_name
- B. chart sum(price) as sales by product_name
- C. timechart list(sales), values(product_name)
- D. stats sum(price) as sales over product_name
正解: D
質問 95
What is the correct order of steps for creating a new lookup?
1. Configure the lookup to run automatically
2. Create the lookup table
3. Define the lookup
- A. 1, 2, 3
- B. 3, 2, 1
- C. 2, 3, 1
- D. 2, 1, 3
正解: C
質問 96
When using| timechart by host, which field is represented in the x-axis?
- A. host
- B. date
- C. _time
- D. time
正解: D
解説:
Reference:https://docs.splunk.com/Documentation/Splunk/8.0.4/SearchReference/Timechart
質問 97
Which function should you use with the transaction command to set the maximum total time between the earliest and latest events returned?
- A. maxduration
- B. maxspan
- C. maxpause
- D. endswith
正解: B
質問 98
These 2 searches will return exactly the same results:
SEARCH 1:host=www1 SEARCH 2: host=WWW1
- A. False
- B. True
正解: A
質問 99
Which of the following statements describes macros?
- A. A macro is a reusable search string that must contain the full search.
- B. A macro is a reusable search string that must have a fixed time range.
- C. A macro is a reusable search string that must contain only a portion of the search.
- D. A macro is a reusable search string that may have a flexible time range.
正解: C
解説:
Explanation
Explanation/Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Definesearchmacros
質問 100
Which Knowledge Object does the Splunk Common Information Model (CIM) use to normalize data, in addition to field aliases, event types, and tags?
- A. Macros
- B. Workflow actions
- C. Lookups
- D. Field extractions
正解: C,D
解説:
Explanation/Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/UsetheCIMtonormalizedataatsearchtime
質問 101
......
Splunk SPLK-1002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
| トピック 9 |
|
| トピック 10 |
|
最新SPLK-1002試験問題にはリアルなSPLK-1002問題集があります：https://www.jpntest.com/shiken/SPLK-1002-mondaishu