[2026] Splunk Core Certified Power User - SPLK-1002 무료 시험 문제

문제1

Why would the transaction command be used instead of the stats command?

A. The transaction command is less resource-intensive.

B. The transaction command has better search-time performance.

C. The transaction command can perform calculations on fields.

D. The transaction command keeps the raw data for each event.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제2

When using transaction, what is the default maximum span between events?

A. 1m

B. Unlimited

C. 1d

D. 1h

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제3

Which of the following are required to create a POST workflow action?

A. URI, search string, time range picker.

B. Label, URI, search string.

C. XMI attributes, URI, name.

D. Label, URI, post arguments.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of these search strings is NOT valid:

A. index=web status=50* | chart count over host by status

B. index=web status=50* | chart count by host, status

C. index=web status=50* | chart count over host, status

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

What is the correct syntax to search for a tag associated with a value on a specific fields?

A. Tag < filed(tagname.)

B. Tag- < field?

C. Tag:: < filed > = < tagname >

D. Tag= < filed > :: < tagname >

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

What information must be included when using the datamodel command?

A. Multiple indexes

B. Data model field name.

C. status field

D. Data model dataset name.

정답: D

문제7

How many ways are there to access the Field Extractor Utility?

A. 3

B. 1

C. 4

D. 5

정답: A

문제8

Based on the macro definition shown below, what is the correct way to execute the macro in a search string?

A. Convert_sales (euro, €, 79)"

B. Convert_sales ($euro,$€$,s79$

C. Convert_sales (euro, €, .79)

D. Convert_sales ($euro, $€$,S,79$)

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제9

How does a user display a chart in stack mode?

A. You cannot display a chart in stack mode, only a timechart.

B. By changing Stack Mode in the Format menu.

C. By turning on the Use Trellis Layout option.

D. By using the stack command.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제10

Which syntax is used to represent an argument in a macro definition?

A. $argument$

B. "argument"

C. 'argument'

D. %argument%

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제11

Which of the following commands will show the maximum bytes?

A. sourcetype=access_* | avg (bytes)

B. sourcetype=access_* | maximum totals by bytes

C. sourcetype=access_* | max(bytes)

D. sourcetype=access_* | stats max(bytes)

정답: D

문제12

The Splunk Common Information Model (CIM) is a collection of what type of knowledge object?

A. Data models

B. Saved searches

C. KV Store

D. Lookups

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제13

Which of the following statements best describes the search string below?
| datamodel Application_State search

A. Events will be returned from the data model named Application_State.

B. Events will be returned from the data model named Application_State (flat mode).

C. No events will be returned; the pipe must occur after the data model command.

D. Events will be returned from dataset Application_State.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제14

How could the following syntax for the chart command be rewritten to remove the OTHER category? (select all that apply)

A. | chart count over CurrentStanding by Action useother=f

B. | chart count over CurrentStanding by Action limit-10

C. | chart count over CurrentStanding by Action limit=10 useother=f

D. | chart count over CurrentStanding by Action usenull-f useother-t

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

Splunk Core Certified Power User - SPLK-1002무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트