Splunk Exam SPLK-2003 Topic 1 Question 30 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 30
Topic #: 1

[All SPLK-2003 Questions]

In this image, which container fields are searched for the text "Malware"?

AEvent Name and Artifact Names.

BEvent Name, Notes, Comments.

CEvent Name or ID.

Show Suggested Answer

Suggested Answer: B

by Nan at Oct 21, 2023, 08:39 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

9 hours ago

Hmm, I'm not sure. A) Event Name and Artifact Names could work, but B) just feels more comprehensive. I'll go with that one.

upvoted 0 times

...

3 days ago

C) Event Name or ID seems like a trap answer. Why would they only search those specific fields for 'Malware'? B) makes the most sense to me.

upvoted 0 times

...

4 days ago

I think the correct answer is B) Event Name, Notes, Comments. Those are the fields where the system would likely search for the text 'Malware'.

upvoted 0 times

...

10 days ago

I'm not sure, but I think it might be Event Name or ID.

upvoted 0 times

...

13 days ago

I believe it could also be Event Name, Notes, Comments.

upvoted 0 times

...

15 days ago

I think the container fields searched for the text 'Malware' are Event Name and Artifact Names.

upvoted 0 times

...