Splunk SPLK-3001 Exam - Topic 5 Question 17 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 17
Topic #: 5

[All SPLK-3001 Questions]

Who can delete an investigation?

Aess_admin users only.

BThe investigation owner only.

CThe investigation owner and ess-admin.

DThe investigation owner and collaborators.

Show Suggested Answer

Suggested Answer: A

by Reena at May 04, 2022, 08:03 PM

Limited Time Offer

25%

Off

Get Premium SPLK-3001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tawny

4 months ago

Just to clarify, it’s actually the owner and ess-admin.

upvoted 0 times

...

Princess

4 months ago

Wait, can collaborators really delete? That seems odd!

upvoted 0 times

...

Alesia

4 months ago

Definitely C, both the owner and ess-admin can delete.

upvoted 0 times

...

Dexter

4 months ago

Nah, I believe the investigation owner can do it too.

upvoted 0 times

...

Anglea

4 months ago

I think only ess_admin users can delete investigations.

upvoted 0 times

...

Jolanda

5 months ago

I’m leaning towards option C, but I need to double-check if ess-admins have that authority.

upvoted 0 times

...

Leota

5 months ago

I’m a bit confused; I thought collaborators could delete too, but maybe that’s not right?

upvoted 0 times

...

Tori

5 months ago

I remember a practice question about who has permissions, and I feel like it was the owner and ess-admin.

upvoted 0 times

...

Twila

5 months ago

I think only the investigation owner can delete it, but I'm not entirely sure.

upvoted 0 times

...

Nicolette

5 months ago

I'm pretty sure the three available Tag Types are Internal, External, and ServiceNow. That sounds familiar from the training materials.

upvoted 0 times

...

Malcolm

5 months ago

I'll eliminate option D quickly since there's clearly some valid points about EDI benefits. Probably going with option A.

upvoted 0 times

...

Clay

5 months ago

I feel like I've seen a similar question about cost-effectiveness before, but that doesn't seem as strong of a point here.

upvoted 0 times

...