Core Certified User

Splunk Core Certified User practice exams

Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.

Exam code
Core Certified User
Cost
$130USD
Questions
60
Duration
60minutes
Passing score
Not published by Splunk
Level
Entry level
Valid for
3years
Study guide
How to prepare
Sources
43official pages
Format
60multiple choice questions, delivered by Pearson VUE at a test centre or with an online proctor

Core Certified User practice exams

2 full-length forms, 60 questions each, apportioned to the published domain weightings.

Still being written. Domain Drill opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups and Creating Scheduled Reports and Alerts.

What the exam tests

Exam domains and official weightings

The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.

8domains
  • Splunk Basics5%
    7 verified
  • Basic Searching22%
    27 verified
  • Using Fields in Searches20%
    25 verified
  • Search Language Fundamentals15%
    19 verified
  • Using Basic Transforming Commands15%
    19 verified
  • Creating Reports and Dashboards12%
    15 verified
  • Creating and Using Lookups6%
    9 verified
  • Creating Scheduled Reports and Alerts5%
    7 verified

Open now. 2 complete practice exams, 60 questions each and Quick Practice on all 128 verified questions.

Opens next. Domain Drill opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups and Creating Scheduled Reports and Alerts.

Every question here is checked against the official page it cites before it serves, which is why the count grows slowly.

Where to focus: Basic Searching and Using Fields in Searches are 42% of the paper between them, so close to half the exam is running a search and reading what comes back. Splunk Basics is 5%, which is three questions on the parts most study time gets spent on.

Every Core Certified User objective, with practice questions mapped to each one

What the exam actually asks you to do

60 multiple choice questions and nothing else. Splunk sets no lab and no simulation on this exam, so the practice that matters is reading a scenario and choosing well under the clock.

Item formats

  • Multiple choice

Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. Splunk, Splunk Core Certified User certification track

Between sittings

The same bank the numbered forms are assembled from.

  • Open now

    Quick Practice

    All 128 verified questions, untimed, with the explanation after each answer.

  • Opens later

    Domain Drill

    Opens when every domain holds 12 verified questions. Still short: Splunk Basics, Creating and Using Lookups, Creating Scheduled Reports and Alerts.

  • Fills as you go

    Review Missed

    Re-asks the questions you got wrong. Nothing to review until you miss something.

Open Core Certified User practice

Splunk’s free resources

Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:

Official Core Certified User exam page & objectives ↗

Keep reading

Every guide and cost breakdown, by vendor

Frequently asked questions

How much does the Splunk Core Certified User exam cost?

Splunk lists the exam at $130 USD per exam attempt and delivers it through its testing partner Pearson VUE, at a test centre or with an online proctor. A retake costs the same $130 again.

How long is the exam and how many questions does it have?

Splunk publishes 60 multiple choice questions in 60 minutes. Splunk notes on the test blueprint that the 60 minutes include three minutes to review the exam agreement, so the working time is 57.

What is the passing score?

Splunk publishes no passing score for this exam, and no exam code either. It states the question count, the time limit and the section weightings on its test blueprint and stops there, so any percentage you see quoted elsewhere is somebody's estimate rather than Splunk's number.

What do I need before I can sit it?

Splunk lists no prerequisite for this exam. Anyone can register for it.

Ready to practice for Core Certified User?

Five questions from across every practice exam, plus 10 questions per certification in bank practice, with no account. Full explanations on every single one.