Splunk Core Certified User practice exams
Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.
- Exam code
- Core Certified User
- Cost
- $130USD
- Questions
- 60
- Duration
- 60minutes
- Passing score
- Not published by Splunk
- Level
- Entry level
- Valid for
- 3years
- Study guide
- How to prepare
- Sources
- 43official pages
- Format
- 60multiple choice questions, delivered by Pearson VUE at a test center or with an online proctor
Core Certified User practice exams
2 full-length forms, 60 questions each, apportioned to the published domain weightings.
Still being written. Domain Drill opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups and Creating Scheduled Reports and Alerts.
An analyst has a statistics table on screen and wants a chart instead. Which tab does the Splunk tutorial tell them to click?
The answer
Visualization
Checked against
help.splunk.com, checked August 2026Click the Visualization tab. The displays shows a Line Chart.
What the exam tests
Exam domains and official weightings
The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.
- Splunk Basics5%7 verified
- Basic Searching22%27 verified
- Using Fields in Searches20%25 verified
- Search Language Fundamentals15%19 verified
- Using Basic Transforming Commands15%19 verified
- Creating Reports and Dashboards12%15 verified
- Creating and Using Lookups6%9 verified
- Creating Scheduled Reports and Alerts5%7 verified
Open now. 2 complete practice exams, 60 questions each and Quick Practice on all 128 verified questions.
Opens next. Domain Drill opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups and Creating Scheduled Reports and Alerts.
Every question here is checked against the official page it cites before it serves, which is why the count grows slowly.
Where to focus: Basic Searching and Using Fields in Searches are 42% of the paper between them, so close to half the exam is running a search and reading what comes back. Splunk Basics is 5%, which is three questions on the parts most study time gets spent on.
Every Core Certified User objective, with practice questions mapped to each one
What the exam actually asks you to do
60 multiple choice questions and nothing else. Splunk sets no lab and no simulation on this exam, so the practice that matters is reading a scenario and choosing well under the clock.
Item formats
- Multiple choice
Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. Splunk, Splunk Core Certified User certification track ↗
Between sittings
The same bank the numbered forms are assembled from.
Quick Practice
Open now
All 128 verified questions, untimed, with the explanation after each answer.
Domain Drill
Opens later
Opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups, Creating Scheduled Reports and Alerts.
Review Missed
Fills as you go
Re-asks the questions you got wrong. Nothing to review until you miss something.
Splunk’s free resources
Study from the source. The page below is free to read, and it is what our own questions are written from.
Official Core Certified User exam page & objectives ↗Keep reading
- Free Core Certified User practice test
10 original questions, playable now. No account, no card.
- Core Certified User exam objectives
The full official blueprint, with practice pages on covered objectives.
- Core Certified User exam format
How many questions, how long, what the items look like, and how long it stays valid.
- Core Certified User passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is Core Certified User?
An honest difficulty read from the format, the clock and the weights.
- What Core Certified User costs
The voucher price, the retake, and what renewal costs across the cycle.
- Core Certified User guide
Who it is for, study plans by experience level, and whether it is worth it.
Frequently asked questions
How much does the Splunk Core Certified User exam cost?
Splunk lists the exam at $130 USD per exam attempt and delivers it through its testing partner Pearson VUE, at a test center or with an online proctor. A retake costs the same $130 again.
How long is the exam and how many questions does it have?
Splunk publishes 60 multiple choice questions in 60 minutes. Splunk notes on the test blueprint that the 60 minutes include three minutes to review the exam agreement, so the working time is 57.
What is the passing score?
Splunk publishes no passing score for this exam, and no exam code either. It states the question count, the time limit and the section weightings on its test blueprint and stops there, so any percentage you see quoted elsewhere is somebody's estimate rather than Splunk's number.
What do I need before I can sit it?
Splunk lists no prerequisite for this exam. Anyone can register for it.