Splunk Exam SPLK-1001 Topic 6 Question 104 Discussion

Actual exam question for Splunk's SPLK-1001 exam

Question #: 104
Topic #: 6

[All SPLK-1001 Questions]

Which search string matches only events with the status_code of 4:4?

Astatus_code !=404

Bstatus_code>=400

Cstatus_code<=404

Dstatus code>403 status_code<405

Show Suggested Answer

Suggested Answer: B

Explanation/Reference:

by Sherman at Dec 06, 2024, 01:21 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

4 days ago

I'm going with B. Seems like the simplest way to get all the 4xx status codes.

upvoted 0 times

...

6 days ago

Option D looks like the most specific match to me. Gotta love those precise search strings!

upvoted 0 times

...

10 days ago

But D includes status_code>403 and status_code<405, which is not just 4:4.

upvoted 0 times

...

12 days ago

I disagree, I believe the answer is A.

upvoted 0 times

...

16 days ago

I think the answer is D.

upvoted 0 times

...