Practice Exam 1
5 of this form’s 65 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.
Question 1 of 5
9-3Creating Data ModelsYou share a data model with the Power role and wonder whether each dataset inside it still needs sharing set separately. What do a model's permissions cover?
Question 2 of 5
8-4Creating and Using Workflow ActionsA team leaves the Earliest time and Latest time fields of a search workflow action blank. What does Splunk say happens?
Question 3 of 5
4-1Creating and Managing FieldsSplunk did not discover a session id in your logs on its own, so you write a custom extraction for it. What must every field extraction configuration include?
Question 4 of 5
7-1Creating and Using MacrosFour dashboards in your app repeat the same eval and rename clauses, and you want that fragment written once and inserted everywhere. What does a search macro hold?
Question 5 of 5
3-1Correlating EventsOne customer booking a hotel room produces a search, a selection and a payment event minutes apart, and you want them handled as one unit. What is a transaction?
0 of 65 completed
The other 60 questions are the rest of this form: same 60 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on Core Certified Power User.
What this exam covers
- Using Transforming Commands for Visualizations3 questions / 5% of the exam
- Filtering and Formatting Results7 questions / 10% of the exam
- Correlating Events10 questions / 15% of the exam
- Creating and Managing Fields7 questions / 10% of the exam
- Creating Field Aliases and Calculated Fields7 questions / 10% of the exam
- Creating Tags and Event Types7 questions / 10% of the exam
- Creating and Using Macros6 questions / 10% of the exam
- Creating and Using Workflow Actions6 questions / 10% of the exam
- Creating Data Models6 questions / 10% of the exam
- Using the Common Information Model (CIM) Add-On6 questions / 10% of the exam
Checking what you already have access to.
Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.