EMT Practice Test

1. Question Content...

---

Question1: Clicking a SEGMENT on a chart, ________.

Question2: What determines the scope of data that appears in a scheduled report?

Question3: When a search returns __________, you can view the results as a list.

Question4: What syntax is used to link key/value pairs in search strings?

Question5: When a Splunk search generates calculated data that appears in the Statistics tab. in what formats can the results be exported?

Question6: In the fields sidebar, which character denotes alphanumeric field values?

Question7: What must be done before an automatic lookup can be created? (select all that apply)

Question8: Which of the following is true about user account settings and preferences?

Question9: Which of the following commands will show the maximum bytes?

Question10: Which Boolean operator is implied between search terms, unless otherwise specified?

Question11: When running searches command modifiers in the search string are displayed in what color?

Question12: This function of the stats command allows you to return the sample standard deviation of a field.

Question13: Which of the following is the most efficient filter for running searches in Splunk?

Question14: When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?

Question15: What is the purpose of using a by clause with the stats command?

Question16: In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

Question17: What happens when a field is added to the Selected Fields list in the fields sidebar'?

Question18: Which statement is true about Splunk alerts?

Question19: Which search string matches only events with the status_code of 4:4?

Question20: Which of the following is a Splunk search best practice?

Question21: Which stats command function provides a count of how many unique values exist for a given field in the result set?

Question22: When displaying results of a search, which of the following is true about line charts?

Question23: Which Boolean operator is always implied between two search terms, unless otherwise specified?

Question24: By default, which of the following fields would be listed in the fields sidebar under interesting Fields?

Question25: Which of the following file types is an option for exporting Splunk search results?