` element that references the host field as a token.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"098f605f-f182-4ea6-8138-99a4ee0941d2","slug":"a-splunk-power-user-is-creating-a-data-model-and-wants-to-ad-bgvgn","questionText":"A Splunk power user is creating a data model and wants to add a field that calculates the duration of a session by subtracting the start time from the end time. The user wants this field to be available in Pivot and in tstats searches. What should the user do?","explanation":"The correct approach is to create an eval-based calculated field within the data model. This allows the user to define a new field using an expression that subtracts the start time from the end time. Calculated fields are evaluated at search time and are accessible in Pivot and tstats when the data model is accelerated. Other methods like field aliases, lookups, or regex extractions do not support arithmetic calculations on existing fields.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"6c904a68-e96a-4ef7-b589-282b861013b1","label":null,"text":"Use a lookup to precompute the duration and add it as a field.","isCorrect":false},{"id":"67c8cb9b-4a03-4b7e-9e20-a0e1253bc68f","label":null,"text":"Define a regex-based field extraction in the data model.","isCorrect":false},{"id":"617c5db8-16ba-4fa6-9c98-3a18a72bf18d","label":null,"text":"Add a field alias in the data model.","isCorrect":false},{"id":"ad3a5f4d-8e3d-4c07-bccc-719dba5ed1f4","label":null,"text":"Create an eval-based calculated field in the data model.","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"9424fe2c-a600-4489-b9b6-addb8539a2af","slug":"which-type-of-workflow-action-allows-you-to-execute-a-new-se-r4yev","questionText":"Which type of workflow action allows you to execute a new search based on the value of a field in a current search result?","explanation":"A Search workflow action runs a new Splunk search using field values from the current result. It is designed to let analysts pivot from one event to related events by launching a preconfigured search. The search string can include field tokens that are substituted at runtime.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"985aa902-e268-4025-ad6d-6e889d70e829","label":null,"text":"Search","isCorrect":true},{"id":"07020949-986f-402b-ae69-3d202d2feadb","label":null,"text":"Dashboard","isCorrect":false},{"id":"8d3ae132-b51b-4cb5-bce4-9d56c92b9c9e","label":null,"text":"Report","isCorrect":false},{"id":"8c8f213a-1ffa-465a-a073-ccb6369072bd","label":null,"text":"GET","isCorrect":false},{"id":"87d58c9b-7c30-40ac-b193-992fdb1a072c","label":null,"text":"POST","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"fc4ddf2d-9e6a-4f23-ab96-bd53eaaad053","slug":"a-splunk-user-wants-to-create-a-workflow-action-that-appears-ipzg1","questionText":"A Splunk user wants to create a workflow action that appears when a user clicks on the `clientip` field in search results. The action should open an external website that displays geolocation information for that IP address. The URL for the website is `https://ipinfo.io/$clientip$`. Which type of workflow action should the user create?","explanation":"Workflow actions of type 'Link' are used to open external URLs, and they support tokens such as `$clientip$` that are replaced with the clicked field's value. The URL provided is a classic example of a link action. The other types, 'Search', 'Dashboard', and 'Script', are either not valid types or not appropriate for opening an external website.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"05b6d9e0-c24e-45e9-901b-9b38ecc7f859","label":null,"text":"Dashboard","isCorrect":false},{"id":"e67733a4-eb44-43d9-8bd2-e04b55b93430","label":null,"text":"Script","isCorrect":false},{"id":"9a121d2f-3988-4b8a-8cd1-356d21b1c2b2","label":null,"text":"Link","isCorrect":true},{"id":"cc39c3c2-cacb-4e8f-8fab-cd8c561424a8","label":null,"text":"Search","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"fa9cf8d2-8965-4a3f-bce6-14d352e9d634","slug":"a-soc-manager-wants-analysts-to-be-able-to-right-click-a-use-4ctbz","questionText":"A SOC manager wants analysts to be able to right-click a `user` field value in search results and open that user's profile page in the organization's identity portal. The portal accepts a URL of the form `https://idp.example.com/user/<username>`. Which workflow action type and configuration should be used?","explanation":"Opening an external profile page requires a GET workflow action whose Link URI embeds the field token, because the platform substitutes the clicked field value into that token when building the URL. A POST action or a search action would not produce the browser navigation the portal expects, and omitting the token would drop the username entirely.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"71736d06-42fe-47ef-8a0e-fde349a423f3","label":null,"text":"A GET workflow action with Link URI `https://idp.example.com/user/$user$` and the field name `user`.","isCorrect":true},{"id":"210bc888-eb5f-4ec2-888e-95fa513ed81f","label":null,"text":"A POST workflow action with Link URI `https://idp.example.com/user/$user$` and the field name `user`.","isCorrect":false},{"id":"baf0dafd-8d56-43c6-a9c7-57ea77165c64","label":null,"text":"A search workflow action with a Search string that queries the identity portal index for the username.","isCorrect":false},{"id":"d47c5db3-3a16-4f47-aa4c-10ba387f5eb7","label":null,"text":"A GET workflow action with Link URI `https://idp.example.com/user/` and the field name `user`, relying on Splunk to append the value automatically.","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"dbdd89af-aa8f-4878-b567-455cdc3e45c1","slug":"which-two-of-the-following-are-true-regarding-the-order-of-o-cxc68","questionText":"Which TWO of the following are true regarding the order of operations when a macro is used in a search?","explanation":"Option A is correct because macro expansion occurs at search time, before the search is actually executed — the search head parses the search string, resolves any macro references into their underlying search fragments, and then runs the resulting expanded search. Option B is correct because macro expansion is context-sensitive: the current app context determines which macros are visible and how they resolve, so the same macro name can expand differently depending on the app in which the search runs. Option C is wrong because the indexer handles indexing and search-time data retrieval, not macro expansion, which is a search-head parsing activity. Option D is wrong because the browser merely submits the search; expansion happens server-side on the search head, not client-side. Option E is wrong because expansion must precede execution — a macro cannot be resolved after the search has already finished.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"hard","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"d790681e-7af5-41df-a4d0-c190e56a1a04","label":null,"text":"Macros are expanded before search execution","isCorrect":true},{"id":"f97b5d74-0538-4951-ba70-9e3e0734c1e1","label":null,"text":"Macros are expanded based on the current app context","isCorrect":true},{"id":"64243a59-be0e-46b3-b972-85202e22a46d","label":null,"text":"Macros are expanded by the Indexer","isCorrect":false},{"id":"c12fe25f-4f76-466e-a0a2-46de82c6a164","label":null,"text":"Macros are expanded by the browser","isCorrect":false},{"id":"20aaeafc-7ff9-4104-88ad-07996be873b4","label":null,"text":"Macros are expanded after the search finishes","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"2df25459-155b-44a0-882a-c9bb5feeedca","slug":"a-splunk-administrator-is-reviewing-an-accelerated-data-mode-y2aqs","questionText":"A Splunk administrator is reviewing an accelerated data model for network traffic. They notice that the acceleration summary contains only events from the last 7 days, but the data model is configured to retain 30 days of summaries. The administrator checks the acceleration settings and sees that the 'Acceleration time range' is set to 'All time'. What is the most likely reason for the discrepancy?","explanation":"Data model acceleration stores summarized results in a summary index. The retention of these summaries is governed by the retention policy of that index, not by the acceleration time range. If the summary index is configured to retain only 7 days of data, the acceleration summaries will only cover the last 7 days, regardless of the acceleration time range setting. Checking the summary index's retention policy resolves the discrepancy.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"c6470f17-5341-4c37-99e3-3d9bfb7de2be","label":null,"text":"The data model's acceleration is not enabled for the entire time range due to a permissions issue.","isCorrect":false},{"id":"23cedced-c50c-48aa-b2a4-fd32c86d4932","label":null,"text":"The data model's acceleration is using a summary index that has a retention policy of 7 days.","isCorrect":true},{"id":"73820e36-167b-4308-a5b3-78c54c91e5b3","label":null,"text":"The data model's acceleration is configured with a summary range that only covers the last 7 days.","isCorrect":false},{"id":"ed741f73-0467-405c-8af4-d87fdbdabdd4","label":null,"text":"The data model's acceleration is limited by the search head's available disk space, causing older summaries to be deleted.","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"88003057-c0b7-4339-a260-6df0a46ccab1","slug":"a-dashboard-panel-runs-a-search-that-aggregates-firewall-eve-q4nvd","questionText":"A dashboard panel runs a search that aggregates firewall events by src_ip. Users report the panel takes over a minute to render. The search uses `stats count by src_ip` after a base search that retrieves 30 days of data. The Search Inspector shows the search is reading far more events than needed, and the aggregation is spilling to disk. Which change is most likely to reduce the panel's render time while preserving the result?","explanation":"Replacing the raw-event aggregation with tstats uses indexed fields and tsidx summaries, eliminating full event retrieval and parsing. This directly addresses the excessive reads and disk spill shown by Search Inspector while returning the same counts, provided the field is indexed. The other options either change results, hide the symptom, or truncate data.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"de9a81e0-0e3d-4d11-8e88-fbbf4d47c5e2","label":null,"text":"Add `| head 10000` immediately after the base search to limit events.","isCorrect":false},{"id":"0b097bf9-85a4-4316-9953-a194e1966e1d","label":null,"text":"Increase the dashboard's refresh interval so the search runs less often.","isCorrect":false},{"id":"c21ac6da-adce-4037-9a4c-3868fdf20af2","label":null,"text":"Add `| tstats count where index=firewall by src_ip` to replace the base search and stats command.","isCorrect":true},{"id":"d8dadd45-bc69-4c7d-baa5-0b076b7759d1","label":null,"text":"Move the `stats` command earlier in the pipeline before any filtering commands.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"47b00781-00ed-4027-9cc4-0a54b405bd0b","slug":"when-configuring-a-csv-lookup-file-where-is-the-file-upload-d6ips","questionText":"When configuring a CSV lookup file, where is the file uploaded in Splunk?","explanation":"CSV lookup files in Splunk are managed as lookup table files, which are uploaded and stored via Settings > Lookups > Lookup table files. This is the dedicated location where Splunk stores the actual CSV content that lookup definitions reference. Once uploaded here, a lookup definition is created to bind the file to a name usable in SPL via the lookup command.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"5fa97c19-1eab-425d-83ea-42ffa3ae0a43","label":null,"text":"Settings > Indexes","isCorrect":false},{"id":"be001144-c3bd-4631-97cb-9e3bbafccb74","label":null,"text":"Settings > Field extractions","isCorrect":false},{"id":"a9b978be-007d-4438-a2ef-a4966124a733","label":null,"text":"Settings > Data inputs","isCorrect":false},{"id":"bedb7def-99e8-4e34-b6e2-3bce86873c6f","label":null,"text":"Settings > Lookups > Lookup table files","isCorrect":true}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"1d1ff041-862e-4431-a95b-a4df025c2573","slug":"which-configuration-file-would-you-modify-to-assign-a-tag-to-tc9ry","questionText":"Which configuration file would you modify to assign a tag to a field-value pair manually?","explanation":"The tags.conf file is the Splunk configuration file that defines tag definitions, mapping a tag name to specific field-value pairs (for example, tagging host=web01 with the tag 'production'). Manual assignment of a tag to a field-value pair is done by editing tags.conf, typically via Settings > Tags in Splunk Web or by directly editing the file in an app's local directory.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"d1fdcc89-2b0a-4ac7-8663-04cda54c39f7","label":null,"text":"props.conf","isCorrect":false},{"id":"96ee9103-f805-42b2-9aa2-23c076ee994e","label":null,"text":"tags.conf","isCorrect":true},{"id":"f2e3f622-3c0e-42f6-8c1e-140481d83e43","label":null,"text":"eventtypes.conf","isCorrect":false},{"id":"ed57031c-7b63-48fd-ad96-fab806039178","label":null,"text":"transforms.conf","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"9be5e3c1-6221-42a7-b89f-83f7c849516b","slug":"a-dashboard-panel-shows-a-timechart-of-web-request-latency-a-5akqd","questionText":"A dashboard panel shows a timechart of web request latency, and users want to click a point on the chart to open a new search in a separate window that lists the individual slow requests for that time. Which dashboard feature should you configure to enable this behavior?","explanation":"The requirement is an interactive, click-driven action that opens a detail search for a selected point. Drilldown configuration on the chart is the dashboard feature designed for this: it captures the clicked value, such as a timestamp, and passes it as a token to a target search that can open in a new window, showing the underlying slow requests.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"f0088fb8-09ed-44bf-b99c-90f56a142cf8","label":null,"text":"A scheduled alert that triggers when latency exceeds a threshold.","isCorrect":false},{"id":"ae011b93-6b85-47e8-9e4f-4d1bdf217299","label":null,"text":"A post-process search that reuses the panel's base search results.","isCorrect":false},{"id":"7340520e-0f24-41a9-b35c-427b9b098e8c","label":null,"text":"A drilldown defined on the chart with a link to a search that uses the clicked time as a token.","isCorrect":true},{"id":"94c95509-cd31-4d65-a6a9-838e41b45948","label":null,"text":"A token set by an input element that filters the dashboard's time range.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"6db32c5b-119f-4989-b362-8f58a8aa96e0","slug":"when-configuring-a-workflow-action-of-type-get-what-is-th-ao7b4","questionText":"When configuring a workflow action of type 'GET', what is the purpose of the 'Link URI' field?","explanation":"For a GET workflow action, the Link URI field specifies the target URL that the browser will request when the action is triggered. It typically includes field placeholders like $field$ that are substituted with the event's field values. This URI determines where the GET request is sent.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"4ad16c2c-476e-48c4-a774-2bb0919ff6e3","label":null,"text":"To provide the target URL for the GET request","isCorrect":true},{"id":"2bba569c-5188-4dba-a1bb-11596e28281c","label":null,"text":"To set the HTTP header for the request","isCorrect":false},{"id":"8ea2970a-a717-4086-9d92-3bf6ad1f28b0","label":null,"text":"To define the search query that the workflow action runs","isCorrect":false},{"id":"ca98ebb6-bf08-417c-be15-53f65423d0ad","label":null,"text":"To identify which index the data should be retrieved from","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"35ae84c8-a6cb-4bc3-b28c-f1f929a8906c","slug":"when-configuring-a-field-alias-in-props-conf-which-of-the-f-6dat5","questionText":"When configuring a field alias in props.conf, which of the following is true?","explanation":"When a field alias is configured in props.conf, the alias appears in the 'interesting fields' list in Splunk Web, allowing users to search by the alias name. The alias does not change the original field name; it provides an alternate name. Field aliases are applied at search time after field extraction, and they do not require an external CSV.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"2c709aa0-1f4b-40fd-aec1-3029318287f4","label":null,"text":"The alias appears in the 'interesting fields' list.","isCorrect":true},{"id":"224ebc3d-1fc1-4010-8411-8c54a127f50f","label":null,"text":"The alias name must be identical to the original field name.","isCorrect":false},{"id":"95741034-09a3-438f-8daa-d2faa32e53da","label":null,"text":"The alias is applied before field extraction.","isCorrect":false},{"id":"11a7e2c9-f32a-4f90-a7a6-11f26d44715d","label":null,"text":"The alias must reference an external CSV.","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"548c3e6b-a440-4a80-bdb9-535001b0dbcb","slug":"you-want-to-create-a-dropdown-input-that-populates-based-on-zkwqz","questionText":"You want to create a dropdown input that populates based on search results. Which XML element is required to define the source of the search for the input?","explanation":"In Splunk Simple XML dashboards, a dropdown input that populates from search results requires a <search> element to define the search query that generates the choices. The <search> element is nested within the <input> element (e.g., <input type=\"dropdown\">) and contains the SPL query. This is the standard way to dynamically populate dropdown options based on search results.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"3476fa0f-3119-4ae9-beca-d074d3dfbb6f","label":null,"text":"<data>","isCorrect":false},{"id":"654341d7-832b-4e5f-9417-b2b4eb690b61","label":null,"text":"<search>","isCorrect":true},{"id":"01b42238-ac16-47b7-8a4f-0956979522fb","label":null,"text":"<populate>","isCorrect":false},{"id":"904df9c9-b393-498c-b87d-c7c859688a8b","label":null,"text":"<query>","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"efd41525-a281-4544-a68f-383b0263a7ea","slug":"a-power-user-configures-an-automatic-lookup-that-enriches-ev-824eu","questionText":"A power user configures an automatic lookup that enriches events with a `priority` field from a CSV, and also defines a calculated field `severity = priority * 10` via EVAL in props.conf. After deploying, `severity` is always null. What is the cause?","explanation":"Calculated fields are evaluated during the field resolution phase, which precedes automatic lookup enrichment. Because priority is added only when the lookup runs, the EVAL expression sees no such field and produces null. Resolving this requires computing severity after enrichment, for example with an eval command placed after the lookup in the search, or by restructuring the enrichment so the dependency is satisfied.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"e4b58988-c78b-4223-ae8f-651c94e66e6b","label":null,"text":"Calculated fields are evaluated before automatic lookups run, so priority does not exist yet when severity is computed","isCorrect":true},{"id":"76f48e91-9089-4f71-af57-85da7b0d7363","label":null,"text":"The CSV lookup does not support numeric fields, so priority cannot be multiplied","isCorrect":false},{"id":"6b2f8841-1f8e-438c-8c08-392dadfb1b0b","label":null,"text":"The lookup definition must set `max_matches` to a value greater than one for the enriched field to be visible to EVAL","isCorrect":false},{"id":"f4445ef6-b2e8-4204-a59e-b3d473ccbcad","label":null,"text":"The EVAL expression must use the `eval` command syntax with quotes around field names","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"df0384b7-2182-449a-8de8-eae93897808e","slug":"what-is-the-difference-between-chart-and-timechart-bqn1q","questionText":"What is the difference between 'chart' and 'timechart'?","explanation":"The key difference is that timechart automatically buckets events by time and plots the results over time, while chart does not automatically bucket by time and can be used with any field. Timechart is specifically designed for time-series visualizations.","domainId":"f18567fc-eec5-4735-a00e-a3c59204bd48","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"a95338d5-7534-4c9f-a795-4938a4d20aca","label":null,"text":"Timechart automatically buckets by time.","isCorrect":true},{"id":"7086f346-5bf9-4054-be94-ca4fc0227f87","label":null,"text":"They are identical commands.","isCorrect":false},{"id":"4c975a20-1576-40f6-8e43-5698bad5a50a","label":null,"text":"Chart is for time-based data.","isCorrect":false},{"id":"8ec1a50a-3f66-48f8-841c-9b9f9784f18c","label":null,"text":"Timechart is for non-time fields.","isCorrect":false}],"domainName":"Transforming Commands And Formatting","domainSlug":"transforming-commands-and-formatting"},{"id":"fd13af38-0a29-4f62-99db-58a7e8df8e96","slug":"which-two-pieces-of-information-must-be-provided-when-defini-pybai","questionText":"Which TWO pieces of information must be provided when defining a lookup table file upload?","explanation":"$6b","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"7e0bc78b-c892-4242-9120-3728c53dddad","label":null,"text":"Lookup definition","isCorrect":false},{"id":"7620c4e3-c90c-44e9-9682-acc4037976e9","label":null,"text":"Destination Filename","isCorrect":true},{"id":"ea73d205-8019-4c22-836f-115a61476a25","label":null,"text":"Lookup index","isCorrect":false},{"id":"d46995aa-ca11-42fb-8024-a1ff6a7a7d4d","label":null,"text":"Field aliases","isCorrect":false},{"id":"e488ca8e-c3f7-475c-8705-e37998307355","label":null,"text":"Destination App","isCorrect":true}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"34fa8b62-cd03-4ecb-9dba-4614489580cc","slug":"which-search-command-is-used-to-display-the-contents-of-a-lo-56gy4","questionText":"Which search command is used to display the contents of a lookup table?","explanation":"The 'inputlookup' command is specifically designed to read and display the contents of a lookup table file (CSV or KV Store) as search results. It is the standard command for viewing lookup data without joining it to an event stream. Running '| inputlookup mylookup.csv' returns all rows and columns from the lookup.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"292411b2-ddd7-48f2-8f90-84822f71fb35","label":null,"text":"table","isCorrect":false},{"id":"9ead88d2-abef-4f83-88f5-c097b918db9e","label":null,"text":"inputlookup","isCorrect":true},{"id":"b17ea13e-00c6-4dc6-b9fa-b860b6c3619c","label":null,"text":"lookup","isCorrect":false},{"id":"3cd4a9ec-07d7-4a24-a634-cec42a25f83f","label":null,"text":"outputlookup","isCorrect":false}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"4514e787-a81c-4d9c-aa7e-6d9a0d6744a0","slug":"which-two-of-the-following-statements-about-pivot-are-true-x6maz","questionText":"Which TWO of the following statements about Pivot are true?","explanation":"Option A is correct because Pivot filters can be saved as reports, allowing users to preserve and reuse their configured filter settings for later analysis. Option C is correct because Pivot provides a graphical user interface that generates SPL (Search Processing Language) commands behind the scenes, enabling users to build visualizations without writing SPL manually. Option B is incorrect because Pivot does support calculations through its interface. Option D is incorrect because Pivot does not require accelerated data models for all use cases, though acceleration can improve performance. Option E is incorrect because Pivot does not automatically delete raw data.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"019c02a0-8265-4644-b79a-1510c6adb66c","label":null,"text":"Pivot filters can be saved as reports","isCorrect":true},{"id":"4dfda024-de23-4aed-ab26-131ba2a0ab41","label":null,"text":"Pivot cannot perform calculations","isCorrect":false},{"id":"f8644a71-f33f-4a4a-bf7f-08520e0eb829","label":null,"text":"Pivot provides a GUI to generate SPL","isCorrect":true},{"id":"20103ac6-2175-47d4-a060-d13cb0f56db7","label":null,"text":"Pivot can only be used with accelerated data models","isCorrect":false},{"id":"4947ec0c-e607-4fa6-b6ee-f8cd105628b1","label":null,"text":"Pivot automatically deletes raw data","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"813925b9-584f-4a9c-9745-bb3483c8c79e","slug":"a-splunk-administrator-is-configuring-a-new-data-model-to-ac-ffr2h","questionText":"A Splunk administrator is configuring a new data model to accelerate a large volume of firewall logs. The administrator wants to ensure that the acceleration summary files are as small as possible while still supporting the required searches. Which of the following actions would best achieve this goal?","explanation":"To minimize summary file size, you should accelerate only the essential data model objects and fields, and restrict the acceleration time range to the period that requires fast searching. This reduces the volume of data that is summarized and stored. Accelerating everything or extending the time range increases storage usage. Infrastructure improvements do not affect summary file size. Selective acceleration is the most effective strategy for balancing performance and storage.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"9fa3c63b-70b4-431a-b330-e597caf1c765","label":null,"text":"Set the acceleration time range to cover the entire retention period of the index.","isCorrect":false},{"id":"7c0fde8d-224c-42c7-ad89-4becaffe910e","label":null,"text":"Accelerate only the specific event objects and fields that are required for the planned searches, and set a shorter acceleration time range.","isCorrect":true},{"id":"167e4d2d-9d80-4199-a6bd-72c77dff6dbb","label":null,"text":"Enable acceleration on all root event objects and child objects to ensure comprehensive coverage.","isCorrect":false},{"id":"1b9d9aaf-3277-4b44-ae8a-b4973483510c","label":null,"text":"Use a high-performance indexer and increase the number of search heads to distribute the acceleration load.","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"138192e1-37f4-4f4e-be0b-1263a562f430","slug":"which-three-of-the-following-are-potential-causes-for-a-data-dsxmy","questionText":"Which THREE of the following are potential causes for a data model to fail to accelerate?","explanation":"Option B is correct because data model acceleration builds and maintains summary files (tsidx) on the indexers, so if the indexer runs out of disk space the acceleration process cannot write or update those summaries and the model fails to accelerate. Option C is correct because acceleration is driven by the base search defined in the data model; if that base search is invalid or returns no results, there is nothing to accelerate and the acceleration job fails or produces no data. Option D is correct because acceleration must be explicitly enabled on the data model (the 'accelerated' setting), and if it is not set to accelerated, no acceleration job runs at all. Option A does not belong because having 'admin' rights is a permissions/role attribute that does not by itself prevent acceleration. Option E does not belong because browser caching affects client-side display of search results, not the server-side acceleration process.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"fc44c436-d52a-4474-a0b1-246702e884a1","label":null,"text":"The user has 'admin' rights","isCorrect":false},{"id":"97da66bc-fd54-40a3-85ac-5991dec71702","label":null,"text":"The indexer is running out of disk space","isCorrect":true},{"id":"dd89db7b-aeca-4f9f-8a5a-110098384522","label":null,"text":"The base search is invalid or returns no results","isCorrect":true},{"id":"a701b403-2e1f-43d6-9de9-4483ada35dc4","label":null,"text":"The data model is not set to 'accelerated'","isCorrect":true},{"id":"061e001e-39de-440b-8046-12983889b7af","label":null,"text":"The browser is cached","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"7587b491-a572-4be8-be3e-413e49d19d48","slug":"you-are-optimizing-a-dashboard-that-uses-several-panels-with-9yvp4","questionText":"You are optimizing a dashboard that uses several panels with inline searches. You want to reduce the overall search load and improve performance. Which two actions should you take? (Choose two.)","explanation":"A base search with post-process searches reduces redundant scanning by running the heavy search once and sharing results. Report acceleration precomputes results for saved searches, cutting disk reads. Both directly lower search load. The other options either increase resource usage or do not address the underlying data scanning, so they are not effective optimizations.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"fae185d8-0e72-4410-8d25-6b411df5bf3f","label":null,"text":"Enable report acceleration on saved searches that power the panels, where the searches are eligible for acceleration.","isCorrect":true},{"id":"5edcb43d-d969-4af1-bb9f-882a51bd08a1","label":null,"text":"Replace multiple inline searches that share the same base dataset with a single base search and post-process searches.","isCorrect":true},{"id":"cda5f09f-91bf-423b-9cbd-687ae1e067b9","label":null,"text":"Set the dashboard's refresh interval to a very short value, such as 1 second, to ensure data is always current.","isCorrect":false},{"id":"83fc14d0-94a1-4a74-88c0-f0236c36a6ee","label":null,"text":"Convert all panel searches to real-time searches to avoid waiting for scheduled searches to complete.","isCorrect":false},{"id":"346cf983-1c6f-42cf-a709-317791bc8940","label":null,"text":"Add the dedup command to every panel search to reduce the number of events returned.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"78026dab-a2e4-4b67-81e1-515faee08143","slug":"a-splunk-power-user-is-building-a-data-model-for-firewall-lo-ecy23","questionText":"A Splunk power user is building a data model for firewall logs. They want to include a calculated field that concatenates the source IP and destination IP into a single field named 'src_dest_pair'. The field should be available for Pivot users without them needing to write SPL. Which data model field type should they use?","explanation":"An eval expression field is designed for creating calculated fields within a data model using eval functions. It allows concatenation of existing fields, such as combining source and destination IPs into a new field. This field is then available in Pivot, enabling users to analyze the combined data without writing SPL. Other field types like lookup, regex, or object do not perform calculations on existing fields.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"64c5d7fa-e8ed-45fc-95bf-3f7007d148c8","label":null,"text":"Object field","isCorrect":false},{"id":"afd95d17-d107-4bd3-a709-27b8a33280fd","label":null,"text":"Lookup field","isCorrect":false},{"id":"ef20e89d-96d0-4af0-85f0-0545661150d1","label":null,"text":"Regex field","isCorrect":false},{"id":"2b320dab-d132-44d2-a9c5-f296c207b929","label":null,"text":"Eval expression field","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"65b9e090-dfc3-4b15-b32d-8c2f6858bf60","slug":"a-splunk-power-user-is-using-pivot-to-analyze-authentication-74g5v","questionText":"A Splunk power user is using Pivot to analyze authentication events. The user wants to see the number of failed logins per user over the last 24 hours. Which CIM data model and object should be used to achieve this?","explanation":"The Authentication data model is specifically designed for authentication events, including successful and failed logins. The Failed_Authentication object contains fields like `user` and `action`, enabling Pivot to count failed logins per user. This directly addresses the requirement.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"cc0c7e3b-b870-4c2c-b498-090a1c66deb5","label":null,"text":"Web data model, Web_Sessions object.","isCorrect":false},{"id":"be917e0f-f0af-4426-8ca9-d65e84903b72","label":null,"text":"Intrusion_Detection data model, Attack object.","isCorrect":false},{"id":"b99b7d4d-f472-4438-9804-13f1e08552e4","label":null,"text":"Network_Traffic data model, All_Traffic object.","isCorrect":false},{"id":"0fc5db80-b8cc-4795-8bf2-519c7d4c92d8","label":null,"text":"Authentication data model, Failed_Authentication object.","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"a7277f52-5ce4-4030-a85d-a66b0820e001","slug":"which-of-the-following-is-a-key-advantage-of-using-kv-store-0yrxk","questionText":"Which of the following is a key advantage of using KV Store lookups over CSV lookups?","explanation":"KV Store lookups support dynamic updates and preserve data types, unlike CSV lookups which are static files. This makes KV Store ideal for lookups that change frequently or require field-type fidelity. CSV lookups are read-only at search time and treat all values as strings.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"32b27b28-111c-4b65-aaf9-421012c5cdff","label":null,"text":"They support dynamic updates and data types.","isCorrect":true},{"id":"877e191d-8de2-4028-aa26-60897a665872","label":null,"text":"They don't require lookup definitions.","isCorrect":false},{"id":"210d51f6-6e46-4f08-9720-5512b86b2585","label":null,"text":"They use less disk space.","isCorrect":false},{"id":"850dad92-6cd8-4087-a2ff-f58d3d0a5dfb","label":null,"text":"They are faster for static data.","isCorrect":false}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"}],"pbqCount":0,"timed":false,"studyMode":true,"durationSeconds":3600,"vendorSlug":"splunk","examSlug":"splunk-adv-power","examName":"Splunk Core Certified Advanced Power User (SPLK-1004) (SPLK-1004)","examCode":"SPLK-1004","isGuest":true,"examTrackId":"b91c7f26-aece-4c09-bf9e-a5aaa7772462","userId":"$undefined"}]] </article></body></html>

1:"$Sreact.fragment" 17:I[31048,[],"default",1] :HL["/_next/static/media/22a5144ee8d83bca-s.p.woff2","font",{"crossOrigin":"","type":"font/woff2"}] :HL["/_next/static/media/7d4881bb7e1bf84d-s.p.woff2","font",{"crossOrigin":"","type":"font/woff2"}] :HL["/_next/static/css/1d69df6975611694.css","style"] :HL["/_next/static/css/5fda6ccf44b848c2.css","style"] 2:Ta6a,{"@context":"https://schema.org","@type":["Organization","EducationalOrganization"],"name":"Courseiva","url":"https://courseiva.com","logo":"https://courseiva.com/icon.svg","description":"Independent IT certification practice platform offering free original exam-style questions and explained answers for cloud, networking, cybersecurity, and IT certification exams.","foundingDate":"2024","founder":{"@type":"Person","name":"Johnson Ajibi","honorificSuffix":"MSc IT Security, IEEE Senior Member","jobTitle":"Security Systems Architect","url":"https://courseiva.com/about","image":"https://courseiva.com/images/johnson-ajibi.jpg","hasCredential":[{"@type":"EducationalOccupationalCredential","name":"IEEE Senior Member","recognizedBy":{"@type":"Organization","name":"IEEE"}},{"@type":"EducationalOccupationalCredential","name":"Microsoft Certified Solutions Expert (MCSE): Cloud Platform & Infrastructure","recognizedBy":{"@type":"Organization","name":"Microsoft"}},{"@type":"EducationalOccupationalCredential","name":"Microsoft Certified Solutions Associate (MCSA)","recognizedBy":{"@type":"Organization","name":"Microsoft"}},{"@type":"EducationalOccupationalCredential","name":"Cisco CCNA Routing and Switching","recognizedBy":{"@type":"Organization","name":"Cisco"}},{"@type":"EducationalOccupationalCredential","name":"Cisco CCDA (Certified Design Associate)","recognizedBy":{"@type":"Organization","name":"Cisco"}}],"alumniOf":[{"@type":"CollegeOrUniversity","name":"Nottingham Trent University"},{"@type":"CollegeOrUniversity","name":"University of Ibadan"}],"worksFor":{"@type":"Organization","name":"JTNetSolutions Limited","url":"https://courseiva.com/"},"knowsAbout":["IT certification preparation","Network engineering","C","C++","C#","Python","Rust","Cybersecurity","Post-quantum cryptography","Trusted Platform Module","Ransomware protection","Device fingerprinting","Offline password management","Network management tooling","PyPI security libraries","Cisco CCNA","CompTIA Security+","Microsoft Azure","AWS cloud certifications","Google Cloud"],"sameAs":["https://github.com/Johnsonajibi","https://github.com/Johnsonajibi/Ransomware_protection","https://github.com/Johnsonajibi/DeviceFingerprinting","https://github.com/Johnsonajibi/PostQuantum-DualUSB-Token-Library","https://github.com/Johnsonajibi/Trustcore-TPM","https://www.linkedin.com/in/johnsonajibi"]},"knowsAbout":["CompTIA Security+ certification preparation","Cisco CCNA certification preparation","Microsoft Azure certifications","AWS cloud certifications","IT certification exam practice questions"],"sameAs":["https://twitter.com/courseiva","https://www.linkedin.com/company/courseiva"]}b:X 14:[["children",{"s":"__PAGE__","d":{"r":"$L15","p":false,"v":null}}]] 12:[["children",{"s":"session","d":{"r":"$L13","p":false,"v":"$b"},"c":"$Q14"}]] 10:[["children",{"s":"exam","d":{"r":"$L11","p":false,"v":"$b"},"c":"$Q12"}]] e:[["children",{"s":{"n":"examSlug","t":"d","k":"splunk-adv-power","s":[]},"d":{"r":"$Lf","p":false,"v":"$b"},"c":"$Q10"}]] c:[["children",{"s":{"n":"vendorSlug","t":"d","k":"splunk","s":[]},"d":{"r":"$Ld","p":false,"v":"$b"},"c":"$Qe"}]] 9:[["children",{"s":"questions","d":{"r":"$La","p":false,"v":"$b"},"c":"$Qc"}]] 7:[["children",{"s":"(marketing)","d":{"r":"$L8","p":false,"v":null},"c":"$Q9"}]] 0:{"P":null,"c":["","questions","splunk","splunk-adv-power","exam","session?count=25&mode=study"],"q":"?count=25&mode=study","i":false,"t":{"t":{"s":"","h":16,"d":{"r":["$","$1","c",{"children":[[["$","link","0",{"rel":"stylesheet","href":"/_next/static/css/1d69df6975611694.css","precedence":"next","crossOrigin":"$undefined","nonce":"$undefined"}],["$","link","1",{"rel":"stylesheet","href":"/_next/static/css/5fda6ccf44b848c2.css","precedence":"next","crossOrigin":"$undefined","nonce":"$undefined"}]],["$","html",null,{"lang":"en","suppressHydrationWarning":true,"children":[["$","head",null,{"suppressHydrationWarning":true,"children":[["$","link",null,{"rel":"preconnect","href":"https://vqgochubfxwxjvceuayy.supabase.co"}],["$","link",null,{"rel":"dns-prefetch","href":"https://vqgochubfxwxjvceuayy.supabase.co"}],["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Courseiva\",\"url\":\"https://courseiva.com\",\"potentialAction\":{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https://courseiva.com/questions?q={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}}"}}],["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$2"}}],"$L3","$L4","$L5","$undefined"]}],"$L6"]}]]}],"p":false,"v":null},"c":"$Q7"},"h":{"r":"$L16","p":false,"v":null}},"m":"$undefined","G":["$17",[]],"S":false,"r":"$undefined","s":"$undefined","a":"$undefined","l":"$undefined","p":"$undefined","d":"$undefined","b":"DjQZA5MQT5_TcX5gMnzeP"} 18:"static/chunks/4093-62f123ce91677856.js" 19:"static/chunks/8312-0ac13d8cc002e369.js" 1a:"static/chunks/3109-c23eab70d5f957e6.js" 1b:"static/chunks/3234-61cdb33f2dc1bfa5.js" 1c:"static/chunks/app/layout-6da9267a11959c96.js" 1d:"LanguageSuggestion" 1e:I[91787,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$1d"] 1f:I[29868,[],""] 20:I[57082,[],""] 21:"static/chunks/app/(marketing)/questions/%5BvendorSlug%5D/%5BexamSlug%5D/exam/page-cba789c71529eae2.js" 22:I[74093,["4093","$18","7631","$21"],""] 33:I[13273,[],"OutletBoundary"] 34:"$Sreact.suspense" 36:"ViewportBoundary" 37:I[13273,[],"$36"] 39:"MetadataBoundary" 3a:I[13273,[],"$39"] 3:["$","meta",null,{"name":"google-adsense-account","content":"ca-pub-9603931774152758"}] 4:["$","meta",null,{"name":"impact-site-verification","value":"b185cc19-191b-45e7-b48b-2a262a343896"}] 5:["$","meta",null,{"name":"impact-site-verification","value":"f919e5ee-2620-4c98-88e0-296064a02a5f"}] 6:["$","body",null,{"className":"__variable_8eaea4 __variable_8c25df __variable_9ba32a font-sans antialiased","suppressHydrationWarning":true,"children":[["$","$L1e",null,{}],["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":[["$","div",null,{"className":"min-h-screen bg-white flex flex-col","children":[["$","header",null,{"className":"border-b border-gray-200 bg-white","children":["$","div",null,{"className":"max-w-6xl mx-auto px-6 h-14 flex items-center","children":["$","$L22",null,{"prefetch":false,"href":"/","className":"flex items-center gap-2","aria-label":"Courseiva home","children":[["$","div",null,{"className":"flex h-7 w-7 items-center justify-center rounded-md bg-slate-900","children":["$","span",null,{"className":"text-xs font-black text-cyan-400","children":"C"}]}],["$","span",null,{"className":"font-bold text-gray-900 tracking-tight","children":"Courseiva"}]]}]}]}],["$","main",null,{"className":"flex-1 flex items-center justify-center px-6 py-20","children":["$","div",null,{"className":"max-w-md w-full text-center space-y-6","children":[["$","div",null,{"className":"text-7xl font-black text-slate-100 select-none","children":"404"}],["$","div",null,{"className":"-mt-4 space-y-3","children":[["$","h1",null,{"className":"text-2xl font-bold text-slate-900","children":"Page not found"}],["$","p",null,{"className":"text-slate-500 text-sm leading-relaxed","children":"The page you’re looking for doesn’t exist or may have moved. Try browsing certifications or searching for what you need."}]]}],["$","div",null,{"className":"flex flex-col sm:flex-row gap-3 justify-center pt-2","children":[["$","$L22",null,{"prefetch":false,"href":"/","className":"inline-flex items-center justify-center gap-2 rounded-xl border border-slate-200 bg-white px-5 py-2.5 text-sm font-medium text-slate-700 hover:bg-slate-50 transition-colors","children":[["$","svg",null,{"ref":"$undefined","xmlns":"http://www.w3.org/2000/svg","width":24,"height":24,"viewBox":"0 0 24 24","fill":"none","stroke":"currentColor","strokeWidth":2,"strokeLinecap":"round","strokeLinejoin":"round","className":"lucide lucide-arrow-left h-4 w-4","aria-hidden":"true","children":[["$","path","1l729n",{"d":"m12 19-7-7 7-7"}],["$","path","x3x0zl",{"d":"M19 12H5"}],"$undefined"]}],"Go home"]}],["$","$L22",null,{"prefetch":false,"href":"/certifications","className":"inline-flex items-center justify-center gap-2 rounded-xl bg-slate-900 px-5 py-2.5 text-sm font-bold text-white hover:bg-slate-700 transition-colors","children":[["$","svg",null,{"ref":"$undefined","xmlns":"http://www.w3.org/2000/svg","width":24,"height":24,"viewBox":"0 0 24 24","fill":"none","stroke":"currentColor","strokeWidth":2,"strokeLinecap":"round","strokeLinejoin":"round","className":"lucide lucide-search h-4 w-4","aria-hidden":"true","children":[["$","path","14j7rj",{"d":"m21 21-4.34-4.34"}],["$","circle","4ej97u",{"cx":"11","cy":"11","r":"8"}],"$undefined"]}],"Browse certifications"]}]]}],["$","div",null,{"className":"pt-4 border-t border-slate-100","children":[["$","p",null,{"className":"text-xs text-slate-400 mb-3","children":"Popular certifications"}],["$","div",null,{"className":"flex flex-wrap justify-center gap-2","children":[["$","$L22","/certifications/ccna",{"prefetch":false,"href":"/certifications/ccna","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"CCNA"}],["$","$L22","/certifications/security-plus",{"prefetch":false,"href":"/certifications/security-plus","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"Security+"}],["$","$L22","/certifications/aws-saa",{"prefetch":false,"href":"/certifications/aws-saa","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"AWS SAA"}],["$","$L22","/certifications/az-104",{"prefetch":false,"href":"/certifications/az-104","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"AZ-104"}],"$L23"]}]]}]]}]}]]}],[]],"forbidden":"$undefined","unauthorized":"$undefined"}],"$L24","$L25","$L26","$L27","$L28","$L29","$L2a","$L2b","$L2c","$L2d","$L2e","$L2f","$L30"]}] 8:["$","$1","c",{"children":[null,"$L31"]}] a:["$","$1","c",{"children":[null,["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}] d:["$","$1","c",{"children":[null,["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}] f:["$","$1","c",{"children":[null,["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}] 11:["$","$1","c",{"children":[null,["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}] 13:["$","$1","c",{"children":[null,["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}] 15:["$","$1","c",{"children":["$L32",null,["$","$L33",null,{"children":["$","$34",null,{"name":"Next.MetadataOutlet","children":"$@35"}]}]]}] 16:["$","$1","h",{"children":[null,["$","$L37",null,{"children":"$L38"}],["$","$L3a",null,{"children":[["$","div",null,{"hidden":true,"children":["$","$34",null,{"name":"Next.Metadata","children":"$L3b"}]}],null]}],["$","meta",null,{"name":"next-size-adjust","content":""}]]}] 3c:I[31307,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"Toaster"] 3d:"AnalyticsProvider" 3e:I[5615,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$3d"] 3f:"ConditionalAdSense" 40:I[74142,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$3f"] 41:I[9311,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"default"] 42:"StaleBuildReload" 43:I[20855,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$42"] 44:"EzoicRouteHandler" 45:I[87961,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$44"] 46:I[17854,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"default"] 47:I[63100,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"default"] 48:I[19277,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"VisitorIdCookie"] 49:"PracticeSyncGuard" 4a:I[92942,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$49"] 4b:"ConditionalClarity" 4c:I[84961,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$4b"] 4d:"ConditionalGoogleAnalytics" 4e:I[1113,["4093","$18","8312","$19","3109","$1a","3234","$1b","7177","$1c"],"$4d"] b:C 23:["$","$L22","/certifications/cysa-plus",{"prefetch":false,"href":"/certifications/cysa-plus","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"CySA+"}] 24:["$","a",null,{"href":"/api/_sys/beacon","rel":"nofollow","aria-hidden":"true","tabIndex":-1,"style":{"position":"absolute","width":1,"height":1,"padding":0,"margin":-1,"overflow":"hidden","clip":"rect(0,0,0,0)","whiteSpace":"nowrap","border":0,"left":"-9999px"},"children":"internal"}] 25:["$","$L3c",null,{"position":"bottom-right","richColors":true}] 26:["$","$34",null,{"fallback":null,"children":["$","$L3e",null,{}]}] 27:["$","$L40",null,{}] 28:["$","$L41",null,{}] 29:["$","$L43",null,{}] 2a:["$","$L45",null,{}] 2b:["$","$L46",null,{}] 2c:["$","$L47",null,{}] 2d:["$","$L48",null,{}] 2e:["$","$L4a",null,{}] 2f:["$","$L4c",null,{}] 30:["$","$L4e",null,{}] 38:[["$","meta","0",{"charSet":"utf-8"}],["$","meta","1",{"name":"viewport","content":"width=device-width, initial-scale=1"}]] 4f:I[52236,[],"IconMark"] 35:null 3b:[["$","title","0",{"children":"SPLK-1004 Practice Exam Session | Courseiva"}],["$","meta","1",{"name":"description","content":"Free IT certification practice questions for AWS, Cisco, CompTIA, Azure, Google Cloud, ISC2 and every other exam we cover. Full explanations included, no account needed."}],["$","meta","2",{"name":"author","content":"Courseiva"}],["$","link","3",{"rel":"manifest","href":"/manifest.webmanifest","crossOrigin":"$undefined"}],["$","meta","4",{"name":"creator","content":"Courseiva"}],["$","meta","5",{"name":"publisher","content":"Courseiva"}],["$","meta","6",{"name":"robots","content":"noindex, follow"}],["$","link","7",{"rel":"canonical","href":"https://courseiva.com/questions/splunk/splunk-adv-power/exam"}],["$","meta","8",{"name":"yandex-verification","content":"0501fe68ed420049"}],["$","meta","9",{"name":"msvalidate.01","content":"F7669DEE2361FD229D77EE85A7E6B4AF"}],["$","meta","10",{"name":"impact-site-verification","content":"b185cc19-191b-45e7-b48b-2a262a343896"}],["$","meta","11",{"name":"impact-site-verification","content":"f919e5ee-2620-4c98-88e0-296064a02a5f"}],["$","meta","12",{"property":"og:title","content":"SPLK-1004 Practice Exam Session | Courseiva"}],["$","meta","13",{"property":"og:description","content":"Free IT certification practice questions for AWS, Cisco, CompTIA, Azure, Google Cloud, ISC2 and every other exam we cover. Full explanations included, no account needed."}],["$","meta","14",{"property":"og:site_name","content":"Courseiva"}],["$","meta","15",{"property":"og:locale","content":"en_US"}],["$","meta","16",{"property":"og:image","content":"https://courseiva.com/opengraph-image.png?5da3c02be6a8f7d8"}],["$","meta","17",{"property":"og:image:type","content":"image/png"}],["$","meta","18",{"property":"og:image:width","content":"1200"}],["$","meta","19",{"property":"og:image:height","content":"630"}],["$","meta","20",{"property":"og:type","content":"website"}],["$","meta","21",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","22",{"name":"twitter:site","content":"@courseiva"}],["$","meta","23",{"name":"twitter:title","content":"SPLK-1004 Practice Exam Session | Courseiva"}],["$","meta","24",{"name":"twitter:description","content":"Free IT certification practice questions for AWS, Cisco, CompTIA, Azure, Google Cloud, ISC2 and every other exam we cover. Full explanations included, no account needed."}],["$","meta","25",{"name":"twitter:image","content":"https://courseiva.com/opengraph-image.png?5da3c02be6a8f7d8"}],["$","meta","26",{"name":"twitter:image:type","content":"image/png"}],["$","meta","27",{"name":"twitter:image:width","content":"1200"}],["$","meta","28",{"name":"twitter:image:height","content":"630"}],["$","link","29",{"rel":"icon","href":"/icon.svg","type":"image/svg+xml"}],["$","link","30",{"rel":"apple-touch-icon","href":"/icon-apple.svg"}],["$","$L4f","31",{}]] 50:Tc47,[{"@context":"https://schema.org","@type":["Organization","EducationalOrganization"],"name":"Courseiva","url":"https://courseiva.com","logo":"https://courseiva.com/icon.svg","description":"Independent IT certification practice platform offering free original exam-style questions and explained answers for cloud, networking, cybersecurity, and IT certification exams.","foundingDate":"2024","founder":{"@type":"Person","name":"Johnson Ajibi","honorificSuffix":"MSc IT Security, IEEE Senior Member","jobTitle":"Security Systems Architect","url":"https://courseiva.com/about","image":"https://courseiva.com/images/johnson-ajibi.jpg","hasCredential":[{"@type":"EducationalOccupationalCredential","name":"IEEE Senior Member","recognizedBy":{"@type":"Organization","name":"IEEE"}},{"@type":"EducationalOccupationalCredential","name":"Microsoft Certified Solutions Expert (MCSE): Cloud Platform \u0026 Infrastructure","recognizedBy":{"@type":"Organization","name":"Microsoft"}},{"@type":"EducationalOccupationalCredential","name":"Microsoft Certified Solutions Associate (MCSA)","recognizedBy":{"@type":"Organization","name":"Microsoft"}},{"@type":"EducationalOccupationalCredential","name":"Cisco CCNA Routing and Switching","recognizedBy":{"@type":"Organization","name":"Cisco"}},{"@type":"EducationalOccupationalCredential","name":"Cisco CCDA (Certified Design Associate)","recognizedBy":{"@type":"Organization","name":"Cisco"}}],"alumniOf":[{"@type":"CollegeOrUniversity","name":"Nottingham Trent University"},{"@type":"CollegeOrUniversity","name":"University of Ibadan"}],"worksFor":{"@type":"Organization","name":"JTNetSolutions Limited","url":"https://courseiva.com/"},"knowsAbout":["IT certification preparation","Network engineering","C","C++","C#","Python","Rust","Cybersecurity","Post-quantum cryptography","Trusted Platform Module","Ransomware protection","Device fingerprinting","Offline password management","Network management tooling","PyPI security libraries","Cisco CCNA","CompTIA Security+","Microsoft Azure","AWS cloud certifications","Google Cloud"],"sameAs":["https://github.com/Johnsonajibi","https://github.com/Johnsonajibi/Ransomware_protection","https://github.com/Johnsonajibi/DeviceFingerprinting","https://github.com/Johnsonajibi/PostQuantum-DualUSB-Token-Library","https://github.com/Johnsonajibi/Trustcore-TPM","https://www.linkedin.com/in/johnsonajibi"]},"knowsAbout":["CompTIA Security+ certification preparation","Cisco CCNA certification preparation","Microsoft Azure certifications","AWS cloud certifications","IT certification exam practice questions"],"sameAs":["https://twitter.com/courseiva","https://www.linkedin.com/company/courseiva"]},{"@context":"https://schema.org","@type":"WebSite","name":"Courseiva","url":"https://courseiva.com","description":"Free IT certification practice questions with explained answers for AWS, CompTIA, Cisco CCNA, Azure, Microsoft, and cybersecurity exams. No account required.","potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://courseiva.com/questions?q={search_term_string}"},"query-input":"required name=search_term_string"}}]31:["$","div",null,{"className":"min-h-screen bg-white text-gray-900","children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$50"}}],"$L51","$L52","$L53"]}] 54:"static/chunks/5468-4b3f4e53c9214b55.js" 55:"static/chunks/3050-c4860e733962b7b5.js" 56:"static/chunks/4857-a2ddc1b897a14011.js" 57:"static/chunks/6720-4560a59ad02e7b83.js" 58:"static/chunks/app/(marketing)/layout-e9e9b0b4fd903ef6.js" 59:I[8734,["4093","$18","5468","$54","3050","$55","4857","$56","6720","$57","9181","$58"],"Navigation"] 51:["$","$L59",null,{"catalog":{"vendors":[{"vendor":"Microsoft","vendorSlug":"microsoft","examCount":25,"exams":[{"slug":"sc-200","code":"SC-200","name":"Microsoft Security Operations Analyst SC-200","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sc-900","code":"SC-900","name":"Microsoft Security, Compliance, and Identity Fundamentals SC-900","capabilities":{"certifications":{"status":"ready"}}},{"slug":"az-104","code":"AZ-104","name":"Azure Administrator","capabilities":{"certifications":{"status":"ready"}}},{"slug":"azure-fundamentals","code":"AZ-900","name":"Microsoft Azure Fundamentals AZ-900","capabilities":{"certifications":{"status":"ready"}}},{"slug":"dp-900","code":"DP-900","name":"Microsoft Azure Data Fundamentals DP-900","capabilities":{"certifications":{"status":"ready"}}},{"slug":"az-305","code":"AZ-305","name":"Microsoft Azure Solutions Architect Expert AZ-305","capabilities":{"certifications":{"status":"ready"}}},{"slug":"ms-102","code":"MS-102","name":"Microsoft 365 Administrator MS-102","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pl-900","code":"PL-900","name":"Microsoft Power Platform Fundamentals PL-900","capabilities":{"certifications":{"status":"ready"}}},{"slug":"az-400","code":"AZ-400","name":"Microsoft Azure DevOps Engineer Expert AZ-400","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sc-100","code":"SC-100","name":"Microsoft Cybersecurity Architect","capabilities":{"certifications":{"status":"ready"}}},{"slug":"dp-300","code":"DP-300","name":"Microsoft Azure Database Administrator Associate DP-300","capabilities":{"certifications":{"status":"ready"}}},{"slug":"md-102","code":"MD-102","name":"Microsoft 365 Endpoint Administrator MD-102","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pl-300","code":"PL-300","name":"Microsoft Power BI Data Analyst PL-300","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-ai103","code":"AI-103","name":"Microsoft Certified: Azure AI Apps and Agents Developer Associate (AI-103) (AI-103)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-ai200","code":"AI-200","name":"Microsoft Certified: Azure AI Cloud Developer Associate (AI-200) (AI-200)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-ab410","code":"AB-410","name":"Microsoft Certified: Intelligent Applications Builder Associate (AB-410) (AB-410)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-dp-700","code":"DP-700","name":"Microsoft Fabric Data Engineer Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-az-802","code":"AZ-802","name":"Microsoft Windows Server Administrator Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-sc-300","code":"SC-300","name":"Microsoft Identity and Access Administrator Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-dp-600","code":"DP-600","name":"Microsoft Fabric Analytics Engineer Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-ms-700","code":"MS-700","name":"Microsoft 365 Certified: Teams Administrator Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-mb-310","code":"MB-310","name":"Microsoft Dynamics 365 Finance Functional Consultant","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-mb-230","code":"MB-230","name":"Microsoft Dynamics 365 Customer Service Functional Consultant","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-mb-330","code":"MB-330","name":"Microsoft Dynamics 365 Supply Chain Management Functional Consultant","capabilities":{"certifications":{"status":"ready"}}},{"slug":"microsoft-ai300","code":"AI-300","name":"Microsoft Certified: Machine Learning Operations Engineer Associate (AI-300) (AI-300)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Palo Alto Networks","vendorSlug":"palo-alto-networks","examCount":17,"exams":[{"slug":"panw-cybersec-apprentice","code":"Cybersecurity-Apprentice","name":"Certified Cybersecurity Apprentice (Cybersecurity-Apprentice)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-xsiam-analyst","code":"XSIAM-Analyst","name":"Certified XSIAM Analyst (XSIAM-Analyst)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-cybersec-practitioner","code":"Cybersecurity-Practitioner","name":"Certified Cybersecurity Practitioner (Cybersecurity-Practitioner)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-secops-architect","code":"SecOps-Architect","name":"Certified Security Operations Architect (SecOps-Architect)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-sdwan-engineer","code":"SD-WAN-Engineer","name":"Certified SD-WAN Engineer (SD-WAN-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-cloudsec-pro","code":"CloudSec-Pro","name":"Certified Cloud Security Professional (CloudSec-Pro)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-netsec-analyst","code":"NetSec-Analyst","name":"Certified Network Security Analyst (NetSec-Analyst)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-secops-pro","code":"SecOps-Pro","name":"Certified Security Operations Professional (SecOps-Pro)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-xdr-analyst","code":"XDR-Analyst","name":"Certified XDR Analyst (XDR-Analyst)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-xsiam-engineer","code":"XSIAM-Engineer","name":"Certified XSIAM Engineer (XSIAM-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-sse-engineer","code":"SSE-Engineer","name":"Certified Security Service Edge Engineer (SSE-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-xdr-engineer","code":"XDR-Engineer","name":"Certified XDR Engineer (XDR-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-xsoar-engineer","code":"XSOAR-Engineer","name":"Certified XSOAR Engineer (XSOAR-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-netsec-architect","code":"NetSec-Architect","name":"Certified Network Security Architect (NetSec-Architect)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-netsec-pro","code":"NetSec-Pro","name":"Certified Network Security Professional (NetSec-Pro)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-ngfw-engineer","code":"NGFW-Engineer","name":"Certified Next-Generation Firewall Engineer (NGFW-Engineer)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"panw-cloudsec-engineer","code":"Cloud-Security-Engineer","name":"Certified Cloud Security Engineer (Cloud-Security-Engineer)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Cisco","vendorSlug":"cisco","examCount":16,"exams":[{"slug":"encor","code":"350-401","name":"ENCOR 350-401","capabilities":{"certifications":{"status":"ready"}}},{"slug":"ccna","code":"200-301","name":"CCNA 200-301 v2","capabilities":{"certifications":{"status":"ready"}}},{"slug":"enarsi","code":"300-410","name":"Cisco CCNP ENARSI 300-410","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-devnet-associate","code":"200-901","name":"Cisco DevNet Associate 200-901","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-cyberops-associate","code":"200-201","name":"Cisco CyberOps Associate 200-201","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccnp-security","code":"350-701","name":"Cisco SCOR / CCNP Security Core 350-701","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccnp-datacenter","code":"350-601","name":"Cisco DCCOR / CCNP Data Center Core 350-601","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccnp-service-provider","code":"350-501","name":"Cisco SPCOR / CCNP Service Provider Core 350-501","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-sncf","code":"300-710 SNCF","name":"Cisco Securing Networks with Cisco Firewalls (300-710 SNCF, CCNP Security) (300-710 SNCF)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccst-cybersecurity","code":"100-160","name":"Cisco Certified Support Technician - Cybersecurity","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccst-it-support","code":"100-140","name":"Cisco Certified Support Technician - IT Support","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-ccst-networking","code":"100-150","name":"Cisco Certified Support Technician - Networking","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-scazt","code":"SCAZT","name":"Cisco Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT, 300-740, CCNP Security) (SCAZT)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-sdsi","code":"SDSI","name":"Cisco Designing Cisco Security Infrastructure (SDSI, 300-745, CCNP Security, design-focused) (SDSI)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-sise","code":"SISE","name":"Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cisco-clcor","code":"CLCOR","name":"Cisco Implementing Cisco Collaboration Core Technologies (CLCOR, 350-801, v2.0 blueprint, CCNP Collaboration) (CLCOR)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"CompTIA","vendorSlug":"comptia","examCount":14,"exams":[{"slug":"security-plus","code":"SY0-701","name":"Security+ SY0-701","capabilities":{"certifications":{"status":"ready"}}},{"slug":"data-plus","code":"DA0-002","name":"CompTIA Data+ (DA0-002)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"itf-plus","code":"FC0-U71","name":"CompTIA Tech+ (FC0-U71)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"casp-plus","code":"CAS-005","name":"CompTIA SecurityX (CAS-005)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"project-plus","code":"PK0-005","name":"CompTIA Project+ PK0-005","capabilities":{"certifications":{"status":"ready"}}},{"slug":"a-plus-220-1201","code":"220-1201","name":"CompTIA A+ Core 1 220-1201","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cloud-plus","code":"CV0-004","name":"CompTIA Cloud+ CV0-004","capabilities":{"certifications":{"status":"ready"}}},{"slug":"linux-plus","code":"XK0-006","name":"CompTIA Linux+ (XK0-006)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pentest-plus","code":"PT0-003","name":"CompTIA PenTest+ (PT0-003)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cysa-plus","code":"CS0-004","name":"CompTIA CySA+ CS0-004","capabilities":{"certifications":{"status":"ready"}}},{"slug":"a-plus-220-1202","code":"220-1202","name":"CompTIA A+ Core 2 220-1202","capabilities":{"certifications":{"status":"ready"}}},{"slug":"network-plus","code":"N10-009","name":"CompTIA Network+ N10-009","capabilities":{"certifications":{"status":"ready"}}},{"slug":"server-plus","code":"SK0-005","name":"CompTIA Server+ SK0-005","capabilities":{"certifications":{"status":"ready"}}},{"slug":"comptia-datasys","code":"DS0-001","name":"CompTIA DataSys+ (DS0-001) (DS0-001)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Google Cloud","vendorSlug":"google-cloud","examCount":13,"exams":[{"slug":"google-pcde","code":"PCDE","name":"Google Professional Cloud Database Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-gen-ai-leader","code":"Generative AI Leader","name":"Google Cloud Generative AI Leader Generative AI Leader","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-cloud-digital-leader","code":"GCDL","name":"Google Cloud Digital Leader","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pca","code":"PCA","name":"Google Professional Cloud Architect","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pmle","code":"PMLE","name":"Google Professional Machine Learning Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-ace","code":"ACE","name":"Google Associate Cloud Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pde","code":"PDE","name":"Google Professional Data Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pcse","code":"PCSE","name":"Google Professional Cloud Security Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pcd","code":"PCD","name":"Google Professional Cloud Developer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pcne","code":"PCNE","name":"Google Professional Cloud Network Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"google-pcdoe","code":"PCDOE","name":"Google Professional Cloud DevOps Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"gcp-adp","code":"GCP-ADP","name":"Google Cloud Associate Data Practitioner (GCP-ADP)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"gws-admin","code":"GWS-ADMIN","name":"Google Cloud Associate Google Workspace Administrator (GWS-ADMIN)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"ISACA","vendorSlug":"isaca","examCount":10,"exams":[{"slug":"isaca-crisc","code":"CRISC","name":"Certified in Risk and Information Systems Control CRISC","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-cisa","code":"CISA","name":"Certified Information Systems Auditor CISA","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-cism","code":"CISM","name":"Certified Information Security Manager CISM","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-ccoa","code":"CCOA","name":"ISACA Certified Cybersecurity Operations Analyst (CCOA) (CCOA)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-cgeit","code":"CGEIT","name":"ISACA Certified in the Governance of Enterprise IT (CGEIT) (CGEIT)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-aaism","code":"AAISM","name":"ISACA Advanced in AI Security Management (AAISM) (AAISM)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-cdpse","code":"CDPSE","name":"ISACA Certified Data Privacy Solutions Engineer (CDPSE) (CDPSE)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-aaia","code":"AAIA","name":"ISACA Advanced in AI Audit (AAIA) (AAIA)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-aair","code":"AAIR","name":"ISACA Advanced in AI Risk (AAIR) (AAIR)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isaca-cobit-2019-foundation","code":"COBIT-2019-F","name":"COBIT 2019 Foundation","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Amazon Web Services","vendorSlug":"aws","examCount":9,"exams":[{"slug":"aws-data-engineer-associate","code":"DEA-C01","name":"AWS Certified Data Engineer Associate DEA-C01","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-devops-professional","code":"DOP-C02","name":"AWS Certified DevOps Engineer Professional DOP-C02","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-developer-associate","code":"DVA-C02","name":"AWS Certified Developer Associate DVA-C02","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-networking-specialty","code":"ANS-C01","name":"AWS Certified Advanced Networking Specialty ANS-C01","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-cloud-practitioner","code":"CLF-C02","name":"AWS Certified Cloud Practitioner CLF-C02","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-sap-c02","code":"SAP-C02","name":"AWS Certified Solutions Architect Professional SAP-C02","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-saa","code":"SAA-C03","name":"AWS Solutions Architect Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-ai-practitioner","code":"AIF-C01","name":"AWS Certified AI Practitioner AIF-C01","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-ml-engineer-associate","code":"MLA-C01","name":"AWS Certified Machine Learning Engineer Associate MLA-C01","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Databricks","vendorSlug":"databricks","examCount":7,"exams":[{"slug":"databricks-genai-engineer-associate","code":"Databricks-GenAI-Assoc","name":"Databricks Certified Generative AI Engineer Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-ml-associate","code":"Databricks-ML-Assoc","name":"Databricks Certified Machine Learning Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-ml-professional","code":"Databricks-ML-Pro","name":"Databricks Certified Machine Learning Professional","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-spark-developer-associate","code":"Databricks-Spark-Assoc","name":"Databricks Certified Associate Developer for Apache Spark","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-data-analyst-associate","code":"Databricks-DA-Assoc","name":"Databricks Certified Data Analyst Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-data-engineer-associate","code":"Databricks-DE-Assoc","name":"Databricks Certified Data Engineer Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"databricks-data-engineer-professional","code":"Databricks-DE-Pro","name":"Databricks Certified Data Engineer Professional","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"EC-Council","vendorSlug":"ec-council","examCount":7,"exams":[{"slug":"ec-ceh","code":"CEH","name":"Certified Ethical Hacker CEH","capabilities":{"certifications":{"status":"ready"}}},{"slug":"ec-chfi","code":"CHFI","name":"Computer Hacking Forensic Investigator CHFI","capabilities":{"certifications":{"status":"ready"}}},{"slug":"eccouncil-ctia","code":"312-85","name":"Certified Threat Intelligence Analyst (312-85)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"eccouncil-csa","code":"312-39","name":"Certified SOC Analyst (312-39)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"eccouncil-ecih","code":"212-89","name":"Certified Incident Handler (212-89)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"eccouncil-cnd","code":"CND","name":"EC-Council Certified Network Defender (CND, 312-38, Blueprint v4.0) (CND)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"eccouncil-cpent","code":"CPENT","name":"EC-Council Certified Penetration Testing Professional (CPENT) (CPENT)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Fortinet","vendorSlug":"fortinet","examCount":7,"exams":[{"slug":"fortinet-nse4","code":"NSE4","name":"Fortinet NSE 4 Network Security Professional NSE4","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse7","code":"NSE7","name":"Fortinet NSE 7 Advanced Security NSE7","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse123","code":"FORTINET-NSE123","name":"Fortinet NSE 1-3 (Network Security Associate track: Foundational, Technical Introduction, Associate) (FORTINET-NSE123)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse56","code":"FORTINET-NSE56","name":"Fortinet NSE5/NSE6 (Network Security Analyst/Specialist tiers, per-product tracks) (FORTINET-NSE56)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse7-sdwan","code":"NSE7_SDW","name":"NSE 7 - SD-WAN (NSE7_SDW)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse7-efw","code":"NSE7_EFW","name":"NSE 7 - Enterprise Firewall (NSE7_EFW)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"fortinet-nse7-specialty","code":"FORTINET-NSE7-SPECIALTY","name":"Fortinet NSE7 Specialty Modules (SD-WAN and Enterprise Firewall tracks) (FORTINET-NSE7-SPECIALTY)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Oracle","vendorSlug":"oracle","examCount":7,"exams":[{"slug":"oracle-oci-genai","code":"1Z0-1127-25","name":"Oracle Cloud Infrastructure Generative AI Professional 1Z0-1127-25","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-java-foundations","code":"1Z0-811","name":"Oracle Java Foundations 1Z0-811","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-ocp-java17","code":"1Z0-829","name":"Oracle Certified Professional Java SE 17 Developer 1Z0-829","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-oci-architect","code":"1Z0-1072-26","name":"Oracle Cloud Infrastructure 2026 Architect Associate (1Z0-1072-26) (1Z0-1072-26)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-oci-foundations","code":"1Z0-1085-26","name":"Oracle Cloud Infrastructure Foundations 2026 Associate (1Z0-1085-26) (1Z0-1085-26)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-oci-architect-pro","code":"1Z0-997-26","name":"Oracle Cloud Infrastructure 2026 Architect Professional (1Z0-997-26) (1Z0-997-26)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"oracle-dbocp","code":"OCP","name":"Oracle Database 23ai Administrator Professional (OCP, 1Z0-183) (OCP)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"PMI","vendorSlug":"pmi","examCount":7,"exams":[{"slug":"pmi-pmp","code":"PMP","name":"Project Management Professional PMP","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pmi-capm","code":"CAPM","name":"Certified Associate in Project Management CAPM","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pmi-pgmp","code":"PgMP","name":"Program Management Professional (PgMP) (PgMP)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pmi-pfmp","code":"PfMP","name":"Portfolio Management Professional (PfMP) (PfMP)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pmi-acp","code":"PMI-ACP","name":"PMI Agile Certified Practitioner (PMI-ACP), 2024-revamped exam outline (PMI-ACP)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"daf","code":"DAF","name":"Disciplined Agile Foundations (DAF, PMI-authorized, replaces the retired DASM) (DAF)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"pmi-rmp","code":"PMI-RMP","name":"PMI Risk Management Professional (PMI-RMP) (PMI-RMP)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Salesforce","vendorSlug":"salesforce","examCount":7,"exams":[{"slug":"salesforce-datacloud","code":"Data 360 Consultant","name":"Salesforce Certified Data Cloud Consultant (Data 360 Consultant) (Data 360 Consultant)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-pd1","code":"SALESFORCE-PD1","name":"Salesforce Certified Platform Developer I (SALESFORCE-PD1)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-salescloud","code":"Sales-Con-201","name":"Salesforce Certified Sales Cloud Consultant (Sales-Con-201) (Sales-Con-201)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-servicecloud","code":"Service-Con-201","name":"Salesforce Certified Service Cloud Consultant (Service-Con-201) (Service-Con-201)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-platform-developer-ii","code":"SF-PD2","name":"Salesforce Certified Platform Developer II","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-data-architect","code":"SF-Data-Arch","name":"Salesforce Certified Data Architecture and Management Designer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"salesforce-admin","code":"SF-Admin","name":"Salesforce Certified Platform Administrator","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"ServiceNow","vendorSlug":"servicenow","examCount":7,"exams":[{"slug":"servicenow-cis-itsm","code":"CIS-ITSM","name":"ServiceNow Certified Implementation Specialist - IT Service Management (CIS-ITSM) (CIS-ITSM)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-cad","code":"SNOW-CAD","name":"ServiceNow Certified Application Developer CAD","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-csa","code":"SNOW-CSA","name":"ServiceNow Certified System Administrator CSA","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-cis-discovery","code":"SERVICENOW-CIS-DISCOVERY","name":"ServiceNow Certified Implementation Specialist - Discovery (CIS-Discovery / CIS-DISCO) (SERVICENOW-CIS-DISCOVERY)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-cis-df","code":"CIS-DF","name":"ServiceNow Certified Implementation Specialist - Data Foundations (CMDB and CSDM) (CIS-DF) (CIS-DF)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-cis-csm","code":"CIS-CSM","name":"ServiceNow Certified Implementation Specialist - Customer Service Management (CIS-CSM) (CIS-CSM)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"servicenow-cis-hr","code":"CIS-HR","name":"ServiceNow Certified Implementation Specialist - Human Resources (CIS-HR, HR Service Delivery) (CIS-HR)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Splunk","vendorSlug":"splunk","examCount":6,"exams":[{"slug":"splunk-core-certified-user","code":"SPLK-1001","name":"Splunk Core Certified User SPLK-1002","capabilities":{"certifications":{"status":"ready"}}},{"slug":"splunk-core-certified-power-user","code":"SPLK-1002","name":"Splunk Core Certified Power User SPLK-1003","capabilities":{"certifications":{"status":"ready"}}},{"slug":"splunk-cybersec","code":"SPLK-5001","name":"Splunk Certified Cybersecurity Defense Analyst (SPLK-5001) (SPLK-5001)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"splunk-adv-power","code":"SPLK-1004","name":"Splunk Core Certified Advanced Power User (SPLK-1004) (SPLK-1004)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"splunk-admin","code":"SPLK-1003","name":"Splunk Enterprise Certified Admin (SPLK-1003) (SPLK-1003)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"splunk-architect","code":"SPLK-2002","name":"Splunk Enterprise Certified Architect (SPLK-2002) (SPLK-2002)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"ISC2","vendorSlug":"isc","examCount":5,"exams":[{"slug":"isc2-cgrc","code":"CGRC","name":"(ISC)2 Certified in Governance, Risk and Compliance (CGRC) (CGRC)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-issep","code":"ISC","name":"(ISC)2 Information Systems Security Engineering Professional (CISSP-ISSEP, Aug 2025 blueprint) (ISC)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-issmp","code":"ISC","name":"(ISC)2 Information Systems Security Management Professional (CISSP-ISSMP, Aug 2025 blueprint) (ISC)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-csslp","code":"CSSLP","name":"(ISC)2 Certified Secure Software Lifecycle Professional (CSSLP) (CSSLP)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-issap","code":"ISC","name":"(ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP, Aug 2025 blueprint) (ISC)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"HashiCorp","vendorSlug":"hashicorp","examCount":5,"exams":[{"slug":"hashicorp-terraform","code":"TF-004","name":"HashiCorp Terraform Associate TF-004","capabilities":{"certifications":{"status":"ready"}}},{"slug":"hashicorp-vault","code":"VA-003","name":"HashiCorp Vault Associate VA-003","capabilities":{"certifications":{"status":"ready"}}},{"slug":"hashicorp-terraform-pro","code":"AWS provider","name":"HashiCorp Certified: Terraform Authoring and Operations Professional (AWS provider) (AWS provider)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"hashicorp-consul","code":"Consul 1.15","name":"HashiCorp Certified: Consul Associate (Consul 1.15) (Consul 1.15)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"hashicorp-vault-ops","code":"Vault Enterprise","name":"HashiCorp Certified: Vault Operations Professional (Vault Enterprise) (Vault Enterprise)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Juniper Networks","vendorSlug":"juniper-networks","examCount":5,"exams":[{"slug":"juniper-jncia-sec","code":"JNCIA-SEC","name":"Juniper Networks Security, Associate (JNCIA-SEC, JN0-232) (JNCIA-SEC)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"juniper-jncia-junos","code":"JN0-106","name":"Juniper Networks Certified Associate Junos JNCIA-Junos","capabilities":{"certifications":{"status":"ready"}}},{"slug":"juniper-jncis-ent","code":"JNCIS-ENT","name":"Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"juniper-jncia-devops","code":"JNCIA-DevOps","name":"Juniper Networks Automation and DevOps, Associate (JNCIA-DevOps, JN0-224) (JNCIA-DevOps)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"juniper-jncip-ent","code":"JNCIP-ENT","name":"Juniper Networks Enterprise Routing and Switching, Professional (JNCIP-ENT, JN0-650) (JNCIP-ENT)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"SAP","vendorSlug":"sap","examCount":5,"exams":[{"slug":"sap-ariba-supplier-management","code":"C_ARSUM","name":"SAP Certified Associate - SAP Ariba Supplier Management","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sap-integration-developer","code":"C_CPI","name":"SAP Certified Associate - Integration Developer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sap-ewm","code":"C_S4EWM","name":"SAP Certified Associate - Extended Warehouse Management in SAP S/4HANA","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sap-financial-accounting","code":"C_TS4FI","name":"SAP Certified Associate - SAP S/4HANA for Financial Accounting","capabilities":{"certifications":{"status":"ready"}}},{"slug":"sap-successfactors-ec","code":"C_THR81","name":"SAP Certified Associate - SAP SuccessFactors Employee Central Core","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Anthropic","vendorSlug":"anthropic","examCount":4,"exams":[{"slug":"anthropic-claude-architect-foundations","code":"CCAR-F","name":"Claude Certified Architect - Foundations","capabilities":{"certifications":{"status":"ready"}}},{"slug":"anthropic-claude-architect-professional","code":"CCAR-P","name":"Claude Certified Architect - Professional","capabilities":{"certifications":{"status":"ready"}}},{"slug":"anthropic-claude-associate","code":"CCAO-F","name":"Claude Certified Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"anthropic-claude-developer","code":"CCDV-F","name":"Claude Certified Developer","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"CNCF","vendorSlug":"cncf","examCount":4,"exams":[{"slug":"cncf-kcna","code":"KCNA","name":"Kubernetes and Cloud Native Associate KCNA","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-cks","code":"CKS","name":"Certified Kubernetes Security Specialist CKS","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-ckad","code":"CKAD","name":"Certified Kubernetes Application Developer CKAD","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-cka","code":"CKA","name":"Certified Kubernetes Administrator CKA","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"CNCF","vendorSlug":"cncf-linux-foundation","examCount":4,"exams":[{"slug":"cncf-cgoa","code":"CGOA","name":"Certified GitOps Associate (CGOA, CNCF/Linux Foundation) (CGOA)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-kcsa","code":"KCSA","name":"Kubernetes and Cloud Native Security Associate (KCSA, CNCF) (KCSA)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-pca","code":"PCA","name":"Prometheus Certified Associate (PCA, CNCF/Linux Foundation) (PCA)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"cncf-ica","code":"ICA","name":"Istio Certified Associate (ICA, CNCF/Linux Foundation) (ICA)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"GIAC","vendorSlug":"giac","examCount":4,"exams":[{"slug":"giac-gsec","code":"GSEC","name":"GIAC Security Essentials","capabilities":{"certifications":{"status":"ready"}}},{"slug":"giac-gcih","code":"GCIH","name":"GIAC Certified Incident Handler","capabilities":{"certifications":{"status":"ready"}}},{"slug":"giac-gpen","code":"GPEN","name":"GIAC Penetration Tester","capabilities":{"certifications":{"status":"ready"}}},{"slug":"giac-gcfa","code":"GCFA","name":"GIAC Certified Forensic Analyst","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"ISC2","vendorSlug":"isc2","examCount":4,"exams":[{"slug":"isc2-cc","code":"CC","name":"ISC2 Certified in Cybersecurity CC","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-sscp","code":"SSCP","name":"Systems Security Certified Practitioner SSCP","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-ccsp","code":"CCSP","name":"Certified Cloud Security Professional CCSP","capabilities":{"certifications":{"status":"ready"}}},{"slug":"isc2-cissp","code":"CISSP","name":"Certified Information Systems Security Professional CISSP","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"LPI","vendorSlug":"lpi","examCount":4,"exams":[{"slug":"lpi-lpic1","code":"LPIC-1","name":"Linux Professional Institute Certification Level 1 LPIC-1","capabilities":{"certifications":{"status":"ready"}}},{"slug":"lpi-lpic2","code":"LPIC-2","name":"Linux Professional Institute Certification Level 2 LPIC-2","capabilities":{"certifications":{"status":"ready"}}},{"slug":"lpi-linux-essentials","code":"010-160","name":"LPI Linux Essentials (010-160, v1.6) (010-160)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"lpic3-305","code":"305-300","name":"LPIC-3 Exam 305: Virtualization and Containerization (305-300) (305-300)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Red Hat","vendorSlug":"red-hat","examCount":4,"exams":[{"slug":"redhat-rhcsa","code":"EX200","name":"Red Hat Certified System Administrator EX200","capabilities":{"certifications":{"status":"ready"}}},{"slug":"redhat-ex280","code":"EX280","name":"Red Hat Certified OpenShift Administrator (EX280, OpenShift Container Platform 4.14+) (EX280)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"redhat-rhce","code":"EX294","name":"Red Hat Certified Engineer EX294","capabilities":{"certifications":{"status":"ready"}}},{"slug":"redhat-ex188","code":"EX188","name":"Red Hat Certified Specialist in Containers (EX188, Podman-based) (EX188)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"AWS","vendorSlug":"aws","examCount":3,"exams":[{"slug":"aws-scs-c03","code":"SCS-C03","name":"AWS Certified Security - Specialty","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-genai-dev","code":"AIP-C01","name":"AWS Certified Generative AI Developer - Professional (AIP-C01) (AIP-C01)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"aws-saa-c03","code":"SAA-C03","name":"AWS Certified Solutions Architect - Associate","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Check Point","vendorSlug":"check-point","examCount":3,"exams":[{"slug":"checkpoint-ccsm","code":"CCSM","name":"Check Point Certified Security Master","capabilities":{"certifications":{"status":"ready"}}},{"slug":"checkpoint-ccsa","code":"156-215.81.20","name":"Check Point Certified Security Administrator","capabilities":{"certifications":{"status":"ready"}}},{"slug":"checkpoint-ccse","code":"156-315.81.20","name":"Check Point Certified Security Expert","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"F5","vendorSlug":"f5","examCount":3,"exams":[{"slug":"f5-cts-ltm","code":"F5-CTS-LTM","name":"F5 Certified Technology Specialist: BIG-IP LTM","capabilities":{"certifications":{"status":"ready"}}},{"slug":"f5-caB1-install-config-upgrade","code":"F5CAB1","name":"F5 Certified Administrator: Install, Initial Configuration, and Upgrade","capabilities":{"certifications":{"status":"ready"}}},{"slug":"f5-caB4-control-plane-admin","code":"F5CAB4","name":"F5 Certified Administrator: Control Plane Administration","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"NVIDIA","vendorSlug":"nvidia","examCount":3,"exams":[{"slug":"nvidia-nca-genl","code":"NCA-GENL","name":"NVIDIA Certified Associate: Generative AI LLMs","capabilities":{"certifications":{"status":"ready"}}},{"slug":"nvidia-ncp-genl","code":"NCP-GENL","name":"NVIDIA Certified Professional: Generative AI LLMs","capabilities":{"certifications":{"status":"ready"}}},{"slug":"nvidia-ncp-aio","code":"NCP-AIO","name":"NVIDIA Certified Professional: AI Operations","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Python Institute","vendorSlug":"python-institute","examCount":3,"exams":[{"slug":"python-pcep","code":"PCEP","name":"Certified Entry-Level Python Programmer PCEP","capabilities":{"certifications":{"status":"ready"}}},{"slug":"python-pcap","code":"PCAP","name":"Certified Associate Python Programmer PCAP","capabilities":{"certifications":{"status":"ready"}}},{"slug":"python-pcpp1","code":"PCPP1","name":"Python Institute Certified Professional in Python Programming 1 (PCPP1, PCPP-32-101) (PCPP1)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Scaled Agile","vendorSlug":"scaled-agile","examCount":3,"exams":[{"slug":"safe-scrum-master","code":"SSM","name":"SAFe Scrum Master","capabilities":{"certifications":{"status":"ready"}}},{"slug":"safe-popm","code":"POPM","name":"SAFe Product Owner / Product Manager","capabilities":{"certifications":{"status":"ready"}}},{"slug":"safe-agilist","code":"SAFe-Agilist","name":"SAFe Agilist","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Snowflake","vendorSlug":"snowflake","examCount":3,"exams":[{"slug":"snowflake-core","code":"COF-C03","name":"SnowPro Core","capabilities":{"certifications":{"status":"ready"}}},{"slug":"snowflake-advanced-data-engineer","code":"DEA-C02","name":"SnowPro Advanced: Data Engineer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"snowflake-advanced-architect","code":"ARA-C01","name":"SnowPro Advanced: Architect","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Alteryx","vendorSlug":"alteryx","examCount":2,"exams":[{"slug":"alteryx-designer-core","code":"Alteryx-Core","name":"Alteryx Designer Core Certification","capabilities":{"certifications":{"status":"ready"}}},{"slug":"alteryx-designer-advanced","code":"Alteryx-Advanced","name":"Alteryx Designer Advanced Certification","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"PeopleCert","vendorSlug":"axelos-peoplecert","examCount":2,"exams":[{"slug":"itil-dpi","code":"DPI","name":"ITIL 4 Strategist: Direct, Plan and Improve (DPI) (DPI)","capabilities":{"certifications":{"status":"ready"}}},{"slug":"prince2-practitioner","code":"PRINCE2-PRACTITIONER","name":"PRINCE2 7 Practitioner (Managing Successful Projects with PRINCE2, 7th Edition) (PRINCE2-PRACTITIONER)","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Citrix","vendorSlug":"citrix","examCount":2,"exams":[{"slug":"citrix-cca-v","code":"1Y0-204","name":"Citrix CCA-V: Virtual Apps and Desktops 7 Administration","capabilities":{"certifications":{"status":"ready"}}},{"slug":"citrix-ccp-v","code":"1Y0-312","name":"Citrix CCP-V: Virtual Apps and Desktops 7 Advanced Administration","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"MongoDB","vendorSlug":"mongodb","examCount":2,"exams":[{"slug":"mongodb-associate-developer","code":"C100DEV","name":"MongoDB Certified Associate Developer","capabilities":{"certifications":{"status":"ready"}}},{"slug":"mongodb-dba-associate","code":"C100DBA","name":"MongoDB Certified DBA Associate","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"PeopleCert","vendorSlug":"peoplecert","examCount":2,"exams":[{"slug":"peoplecert-prince2-foundation","code":"PRINCE2F","name":"PRINCE2 Foundation","capabilities":{"certifications":{"status":"ready"}}},{"slug":"peoplecert-itil4-foundation","code":"ITIL4F","name":"ITIL 4 Foundation","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"PeopleCert","vendorSlug":"peoplecert-axelos","examCount":2,"exams":[{"slug":"itil4-specialist-cds","code":"ITIL4-CDS","name":"ITIL 4 Specialist: Create, Deliver and Support","capabilities":{"certifications":{"status":"ready"}}},{"slug":"itil4-strategist-dpi","code":"ITIL4-DPI","name":"ITIL 4 Strategist: Direct, Plan and Improve","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"UiPath","vendorSlug":"uipath","examCount":2,"exams":[{"slug":"uipath-adav1","code":"UiPath-ADAv1","name":"UiPath Automation Developer Associate","capabilities":{"certifications":{"status":"ready"}}},{"slug":"uipath-adpv1","code":"UiPath-ADPv1","name":"UiPath Automation Developer Professional","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"ISTQB","vendorSlug":"istqb","examCount":1,"exams":[{"slug":"istqb-ctfl-v4","code":"CTFL-v4","name":"ISTQB Certified Tester Foundation Level v4.0","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Linux Foundation","vendorSlug":"linux-foundation","examCount":1,"exams":[{"slug":"lf-lfcs","code":"LFCS","name":"Linux Foundation Certified System Administrator LFCS","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"OffSec","vendorSlug":"offsec","examCount":1,"exams":[{"slug":"offsec-oscp","code":"PEN-200","name":"OffSec PEN-200 / OSCP Concepts","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Scrum Alliance","vendorSlug":"scrum-alliance","examCount":1,"exams":[{"slug":"scrum-alliance-csm","code":"CSM","name":"Certified ScrumMaster","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"Salesforce","vendorSlug":"tableau-salesforce","examCount":1,"exams":[{"slug":"tableau-desktop-foundations","code":"Tableau-Desktop-Found","name":"Salesforce Certified Tableau Desktop Foundations","capabilities":{"certifications":{"status":"ready"}}}]},{"vendor":"VMware","vendorSlug":"vmware","examCount":1,"exams":[{"slug":"vmware-vcp-vvf","code":"VCP-VVF","name":"VMware vSphere Foundation 9.0 Administrator (VCP-VVF, 2V0-16.25) (VCP-VVF)","capabilities":{"certifications":{"status":"ready"}}}]}],"totals":{"exams":271}},"resourceCounts":{"glossary":3135,"commands":590,"scenarios":323,"blog":130,"labs":12}}] 52:["$","$L1f",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L20",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":[["$","main",null,{"className":"flex flex-1 items-center justify-center px-6 py-20","children":["$","div",null,{"className":"max-w-md w-full text-center space-y-6","children":[["$","div",null,{"className":"text-7xl font-black text-slate-100 select-none","children":"404"}],["$","div",null,{"className":"-mt-4 space-y-3","children":[["$","h1",null,{"className":"text-2xl font-bold text-slate-900","children":"Page not found"}],["$","p",null,{"className":"text-slate-500 text-sm leading-relaxed","children":"The page you’re looking for doesn’t exist or may have moved. Try browsing certifications or searching for what you need."}]]}],["$","div",null,{"className":"flex flex-col sm:flex-row gap-3 justify-center pt-2","children":[["$","$L22",null,{"prefetch":false,"href":"/","className":"inline-flex items-center justify-center gap-2 rounded-xl border border-slate-200 bg-white px-5 py-2.5 text-sm font-medium text-slate-700 hover:bg-slate-50 transition-colors","children":[["$","svg",null,{"ref":"$undefined","xmlns":"http://www.w3.org/2000/svg","width":24,"height":24,"viewBox":"0 0 24 24","fill":"none","stroke":"currentColor","strokeWidth":2,"strokeLinecap":"round","strokeLinejoin":"round","className":"lucide lucide-arrow-left h-4 w-4","aria-hidden":"true","children":[["$","path","1l729n",{"d":"m12 19-7-7 7-7"}],["$","path","x3x0zl",{"d":"M19 12H5"}],"$undefined"]}],"Go home"]}],["$","$L22",null,{"prefetch":false,"href":"/certifications","className":"inline-flex items-center justify-center gap-2 rounded-xl bg-slate-900 px-5 py-2.5 text-sm font-bold text-white hover:bg-slate-700 transition-colors","children":[["$","svg",null,{"ref":"$undefined","xmlns":"http://www.w3.org/2000/svg","width":24,"height":24,"viewBox":"0 0 24 24","fill":"none","stroke":"currentColor","strokeWidth":2,"strokeLinecap":"round","strokeLinejoin":"round","className":"lucide lucide-search h-4 w-4","aria-hidden":"true","children":[["$","path","14j7rj",{"d":"m21 21-4.34-4.34"}],["$","circle","4ej97u",{"cx":"11","cy":"11","r":"8"}],"$undefined"]}],"Browse certifications"]}]]}],["$","div",null,{"className":"pt-4 border-t border-slate-100","children":[["$","p",null,{"className":"text-xs text-slate-400 mb-3","children":"Popular certifications"}],["$","div",null,{"className":"flex flex-wrap justify-center gap-2","children":[["$","$L22","/certifications/ccna",{"prefetch":false,"href":"/certifications/ccna","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"CCNA"}],["$","$L22","/certifications/security-plus",{"prefetch":false,"href":"/certifications/security-plus","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"Security+"}],["$","$L22","/certifications/aws-saa",{"prefetch":false,"href":"/certifications/aws-saa","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"AWS SAA"}],["$","$L22","/certifications/az-104",{"prefetch":false,"href":"/certifications/az-104","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"AZ-104"}],["$","$L22","/certifications/cysa-plus",{"prefetch":false,"href":"/certifications/cysa-plus","className":"px-3 py-1 rounded-full border border-slate-200 text-xs text-slate-600 hover:border-cyan-300 hover:text-slate-900 transition-colors","children":"CySA+"}]]}]]}]]}]}],[]],"forbidden":"$undefined","unauthorized":"$undefined"}] 53:["$","footer",null,{"className":"border-t border-gray-200 bg-white py-12","children":[["$","div",null,{"className":"max-w-6xl mx-auto px-6 grid grid-cols-2 md:grid-cols-5 gap-8","children":[["$","div",null,{"className":"col-span-2 md:col-span-1","children":[["$","$L22",null,{"prefetch":false,"href":"/","className":"flex items-center gap-2 mb-3","aria-label":"Courseiva home","children":[["$","div",null,{"className":"flex h-7 w-7 items-center justify-center rounded-md bg-slate-900","children":["$","span",null,{"className":"text-xs font-black text-cyan-400","children":"C"}]}],["$","span",null,{"className":"font-bold text-gray-900","children":"Courseiva"}]]}],["$","p",null,{"className":"text-sm text-gray-500 leading-relaxed","children":"Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more."}]]}],["$","div",null,{"className":"col-span-2","children":[["$","h4",null,{"className":"text-sm font-semibold text-gray-900 mb-3","children":"Certification Practice Questions"}],["$","div",null,{"className":"grid grid-cols-2 gap-x-4 gap-y-2 text-sm text-gray-500","children":[["$","$L22","/questions/cisco/ccna",{"prefetch":false,"href":"/questions/cisco/ccna","className":"hover:text-gray-900 transition-colors truncate","children":"CCNA practice questions"}],["$","$L22","/questions/comptia/security-plus",{"prefetch":false,"href":"/questions/comptia/security-plus","className":"hover:text-gray-900 transition-colors truncate","children":"Security+ SY0-701 practice questions"}],["$","$L22","/questions/aws/aws-saa",{"prefetch":false,"href":"/questions/aws/aws-saa","className":"hover:text-gray-900 transition-colors truncate","children":"AWS SAA-C03 practice questions"}],["$","$L22","/questions/microsoft/az-104",{"prefetch":false,"href":"/questions/microsoft/az-104","className":"hover:text-gray-900 transition-colors truncate","children":"AZ-104 practice questions"}],["$","$L22","/questions/microsoft/az-900",{"prefetch":false,"href":"/questions/microsoft/az-900","className":"hover:text-gray-900 transition-colors truncate","children":"AZ-900 practice questions"}],["$","$L22","/questions/aws/aws-cloud-practitioner",{"prefetch":false,"href":"/questions/aws/aws-cloud-practitioner","className":"hover:text-gray-900 transition-colors truncate","children":"CLF-C02 practice questions"}],["$","$L22","/questions/comptia/a-plus-core-1",{"prefetch":false,"href":"/questions/comptia/a-plus-core-1","className":"hover:text-gray-900 transition-colors truncate","children":"A+ Core 1 practice questions"}],["$","$L22","/questions/google-cloud/google-ace",{"prefetch":false,"href":"/questions/google-cloud/google-ace","className":"hover:text-gray-900 transition-colors truncate","children":"Google Cloud ACE practice questions"}],["$","$L22","/questions/comptia/cysa-plus",{"prefetch":false,"href":"/questions/comptia/cysa-plus","className":"hover:text-gray-900 transition-colors truncate","children":"CySA+ CS0-003 practice questions"}],["$","$L22","/questions/comptia/network-plus",{"prefetch":false,"href":"/questions/comptia/network-plus","className":"hover:text-gray-900 transition-colors truncate","children":"Network+ N10-009 practice questions"}]]}],["$","$L22",null,{"prefetch":false,"href":"/certifications","className":"inline-block mt-3 text-xs font-semibold text-gray-900 hover:underline","children":"View all certifications →"}]]}],["$","div",null,{"children":[["$","h4",null,{"className":"text-sm font-semibold text-gray-900 mb-3","children":"Product"}],["$","div",null,{"className":"space-y-2 text-sm text-gray-500 mb-5","children":[["$","$L22",null,{"prefetch":false,"href":"/certifications","className":"block hover:text-gray-900 transition-colors","children":"Certifications"}],["$","$L22",null,{"prefetch":false,"href":"/certifications/paths","className":"block hover:text-gray-900 transition-colors","children":"Certification Paths"}],["$","$L22",null,{"prefetch":false,"href":"/topics","className":"block hover:text-gray-900 transition-colors","children":"Exam Topics"}],["$","$L22",null,{"prefetch":false,"href":"/practice-tests","className":"block hover:text-gray-900 transition-colors","children":"Practice Tests"}],"$L5a","$L5b","$L5c"]}],"$L5d","$L5e"]}],"$L5f"]}],"$L60","$L61"]}] 62:"CookieSettingsLink" 63:I[91975,["4093","$18","5468","$54","3050","$55","4857","$56","6720","$57","9181","$58"],"$62"] 5a:["$","$L22",null,{"prefetch":false,"href":"/editorial-policy","className":"block hover:text-gray-900 transition-colors","children":"How We Create Questions"}] 5b:["$","$L22",null,{"prefetch":false,"href":"/blog","className":"block hover:text-gray-900 transition-colors","children":"Study Hub"}] 5c:["$","$L22",null,{"prefetch":false,"href":"/vs","className":"block hover:text-gray-900 transition-colors","children":"Comparisons"}] 5d:["$","h4",null,{"className":"text-sm font-semibold text-gray-900 mb-3","children":"Free Resources"}] 5e:["$","div",null,{"className":"space-y-2 text-sm text-gray-500","children":[["$","$L22",null,{"prefetch":false,"href":"/difficulty-index","className":"block hover:text-gray-900 transition-colors","children":"Difficulty Index"}],["$","$L22",null,{"prefetch":false,"href":"/learn","className":"block hover:text-gray-900 transition-colors","children":"Learn — Free Chapters"}],["$","$L22",null,{"prefetch":false,"href":"/glossary","className":"block hover:text-gray-900 transition-colors","children":"IT Glossary"}],["$","$L22",null,{"prefetch":false,"href":"/labs","className":"block hover:text-gray-900 transition-colors","children":"Free Tools & Labs"}],["$","$L22",null,{"prefetch":false,"href":"/guides","className":"block hover:text-gray-900 transition-colors","children":"Study Guides"}],["$","$L22",null,{"prefetch":false,"href":"/roadmaps","className":"block hover:text-gray-900 transition-colors","children":"Career Roadmaps"}],["$","$L22",null,{"prefetch":false,"href":"/vendors","className":"block hover:text-gray-900 transition-colors","children":"Browse by Vendor"}],["$","$L22",null,{"prefetch":false,"href":"/commands/cisco","className":"block hover:text-gray-900 transition-colors","children":"Cisco Command Reference"}],["$","$L22",null,{"prefetch":false,"href":"/scenarios/ccna","className":"block hover:text-gray-900 transition-colors","children":"CCNA Scenarios"}]]}] 5f:["$","div",null,{"children":[["$","h4",null,{"className":"text-sm font-semibold text-gray-900 mb-3","children":"Company"}],["$","div",null,{"className":"space-y-2 text-sm text-gray-500 mb-5","children":[["$","$L22",null,{"prefetch":false,"href":"/about","className":"block hover:text-gray-900 transition-colors","children":"About"}],["$","$L22",null,{"prefetch":false,"href":"/contact","className":"block hover:text-gray-900 transition-colors","children":"Contact"}],["$","$L22",null,{"prefetch":false,"href":"/editorial-policy","className":"block hover:text-gray-900 transition-colors","children":"Editorial Policy"}],["$","$L22",null,{"prefetch":false,"href":"/question-writing-policy","className":"block hover:text-gray-900 transition-colors","children":"Question Writing Policy"}],["$","$L22",null,{"prefetch":false,"href":"/trust-center","className":"block hover:text-gray-900 transition-colors","children":"Trust Center"}]]}],["$","h4",null,{"className":"text-sm font-semibold text-gray-900 mb-3","children":"Legal"}],["$","div",null,{"className":"space-y-2 text-sm text-gray-500","children":[["$","$L22",null,{"prefetch":false,"href":"/privacy","className":"block hover:text-gray-900 transition-colors","children":"Privacy Policy"}],["$","$L63",null,{"className":"block text-left hover:text-gray-900 transition-colors"}],["$","$L22",null,{"prefetch":false,"href":"/terms","className":"block hover:text-gray-900 transition-colors","children":"Terms of Service"}],["$","$L22",null,{"prefetch":false,"href":"/affiliate-disclosure","className":"block hover:text-gray-900 transition-colors","children":"Affiliate Disclosure"}]]}]]}] 60:["$","div",null,{"className":"max-w-6xl mx-auto px-6 mt-8 pt-8 border-t border-gray-200","children":[["$","nav",null,{"aria-label":"Language","className":"mb-4","children":["$","ul",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-2 text-sm text-gray-500","children":[["$","li","en",{"children":["$","span",null,{"aria-current":"true","lang":"en","className":"font-semibold text-gray-900","children":"English"}]}],["$","li","es",{"children":["$","$L22",null,{"prefetch":false,"href":"/es","hrefLang":"es","lang":"es","className":"hover:text-gray-900 transition-colors","children":"Español"}]}],["$","li","fr",{"children":["$","$L22",null,{"prefetch":false,"href":"/fr","hrefLang":"fr","lang":"fr","className":"hover:text-gray-900 transition-colors","children":"Français"}]}],["$","li","pt",{"children":["$","$L22",null,{"prefetch":false,"href":"/pt","hrefLang":"pt-BR","lang":"pt-BR","className":"hover:text-gray-900 transition-colors","children":"Português"}]}]]}]}],["$","p",null,{"className":"text-xs text-gray-500 leading-relaxed mb-4 max-w-3xl","children":"Free practice questions with answer explanations for Cisco, CompTIA, Microsoft, AWS and other IT certifications, plus mock exams, readiness tracking and study analytics."}]]}] 61:["$","div",null,{"className":"max-w-6xl mx-auto px-6 pt-4 border-t border-gray-100 flex flex-col gap-1.5","children":[["$","p",null,{"className":"text-xs text-gray-400","children":"© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved."}],["$","p",null,{"className":"text-xs text-gray-400","children":"Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for."}]]}] 64:"static/chunks/1195-5be108261c2647b5.js" 65:"static/chunks/1972-87d9db885b6f6f4c.js" 66:"static/chunks/6880-487473bf45dda02f.js" 67:"static/chunks/4189-e693e83bc9191d45.js" 68:"static/chunks/3255-000626c41af902a2.js" 69:"static/chunks/app/(marketing)/questions/%5BvendorSlug%5D/%5BexamSlug%5D/exam/session/page-6ae5721d387806f9.js" 6a:I[73762,["4093","$18","1195","$64","1972","$65","6880","$66","4189","$67","3255","$68","8820","$69"],"default"] 6b:T416,When defining a lookup table file upload, the two required pieces of information are the Destination Filename (B) and the Destination App (E). The Destination Filename (B) specifies the exact name of the lookup file (for example, a .csv file) that will be created or replaced in the destination app, so the system knows where to write the uploaded lookup data. The Destination App (E) identifies the Splunk app context in which the lookup file will be stored, ensuring the file is placed in the correct app's lookups directory and is available to knowledge objects in that app. The Lookup definition (A) is not required at upload time because the lookup definition (transform) can be created or referenced separately after the file exists. The Lookup index (C) is not applicable, since lookup files are stored as files in an app's lookups directory, not indexed as events in an index. Field aliases (D) are optional configuration applied to a lookup definition to map lookup fields to event fields, and are not required to upload the file itself.32:[["$","h1",null,{"className":"sr-only","children":["SPLK-1004"," practice exam session"]}],["$","$L6a",null,{"questions":[{"id":"317a8184-c438-4256-b75a-b4d9505024d0","slug":"a-dashboard-has-a-panel-that-shows-a-table-of-error-counts-b-jxk40","questionText":"A dashboard has a panel that shows a table of error counts by host. Users want to click a host name and open a new dashboard filtered to that host. Which Simple XML element defines this behavior on the table panel?","explanation":"Drilldown with a link is the Simple XML mechanism for click-through navigation. It captures the clicked field value into a token and navigates to a target dashboard, where that token filters the destination. The other elements either control display, visibility, or are not valid attributes for click behavior.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"35a6c9e6-a598-4a3b-a97f-25f37a73382a","label":null,"text":"A `` element with an `onClick` handler that calls a saved search.","isCorrect":false},{"id":"8fa17b53-7f17-4498-8b56-3965695dcbda","label":null,"text":"A `` element with a `depends` attribute set to the host field.","isCorrect":false},{"id":"4ed5d4b3-69c3-4aa2-9927-39a4933be378","label":null,"text":"A `` element containing a `` with a target dashboard and a token set from the clicked field.","isCorrect":true},{"id":"51d44aee-baf2-46d8-ba10-7869e6dfcc4b","label":null,"text":"A `` element that references the host field as a token.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"098f605f-f182-4ea6-8138-99a4ee0941d2","slug":"a-splunk-power-user-is-creating-a-data-model-and-wants-to-ad-bgvgn","questionText":"A Splunk power user is creating a data model and wants to add a field that calculates the duration of a session by subtracting the start time from the end time. The user wants this field to be available in Pivot and in tstats searches. What should the user do?","explanation":"The correct approach is to create an eval-based calculated field within the data model. This allows the user to define a new field using an expression that subtracts the start time from the end time. Calculated fields are evaluated at search time and are accessible in Pivot and tstats when the data model is accelerated. Other methods like field aliases, lookups, or regex extractions do not support arithmetic calculations on existing fields.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"6c904a68-e96a-4ef7-b589-282b861013b1","label":null,"text":"Use a lookup to precompute the duration and add it as a field.","isCorrect":false},{"id":"67c8cb9b-4a03-4b7e-9e20-a0e1253bc68f","label":null,"text":"Define a regex-based field extraction in the data model.","isCorrect":false},{"id":"617c5db8-16ba-4fa6-9c98-3a18a72bf18d","label":null,"text":"Add a field alias in the data model.","isCorrect":false},{"id":"ad3a5f4d-8e3d-4c07-bccc-719dba5ed1f4","label":null,"text":"Create an eval-based calculated field in the data model.","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"9424fe2c-a600-4489-b9b6-addb8539a2af","slug":"which-type-of-workflow-action-allows-you-to-execute-a-new-se-r4yev","questionText":"Which type of workflow action allows you to execute a new search based on the value of a field in a current search result?","explanation":"A Search workflow action runs a new Splunk search using field values from the current result. It is designed to let analysts pivot from one event to related events by launching a preconfigured search. The search string can include field tokens that are substituted at runtime.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"985aa902-e268-4025-ad6d-6e889d70e829","label":null,"text":"Search","isCorrect":true},{"id":"07020949-986f-402b-ae69-3d202d2feadb","label":null,"text":"Dashboard","isCorrect":false},{"id":"8d3ae132-b51b-4cb5-bce4-9d56c92b9c9e","label":null,"text":"Report","isCorrect":false},{"id":"8c8f213a-1ffa-465a-a073-ccb6369072bd","label":null,"text":"GET","isCorrect":false},{"id":"87d58c9b-7c30-40ac-b193-992fdb1a072c","label":null,"text":"POST","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"fc4ddf2d-9e6a-4f23-ab96-bd53eaaad053","slug":"a-splunk-user-wants-to-create-a-workflow-action-that-appears-ipzg1","questionText":"A Splunk user wants to create a workflow action that appears when a user clicks on the `clientip` field in search results. The action should open an external website that displays geolocation information for that IP address. The URL for the website is `https://ipinfo.io/$clientip$`. Which type of workflow action should the user create?","explanation":"Workflow actions of type 'Link' are used to open external URLs, and they support tokens such as `$clientip$` that are replaced with the clicked field's value. The URL provided is a classic example of a link action. The other types, 'Search', 'Dashboard', and 'Script', are either not valid types or not appropriate for opening an external website.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"05b6d9e0-c24e-45e9-901b-9b38ecc7f859","label":null,"text":"Dashboard","isCorrect":false},{"id":"e67733a4-eb44-43d9-8bd2-e04b55b93430","label":null,"text":"Script","isCorrect":false},{"id":"9a121d2f-3988-4b8a-8cd1-356d21b1c2b2","label":null,"text":"Link","isCorrect":true},{"id":"cc39c3c2-cacb-4e8f-8fab-cd8c561424a8","label":null,"text":"Search","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"fa9cf8d2-8965-4a3f-bce6-14d352e9d634","slug":"a-soc-manager-wants-analysts-to-be-able-to-right-click-a-use-4ctbz","questionText":"A SOC manager wants analysts to be able to right-click a `user` field value in search results and open that user's profile page in the organization's identity portal. The portal accepts a URL of the form `https://idp.example.com/user/<username>`. Which workflow action type and configuration should be used?","explanation":"Opening an external profile page requires a GET workflow action whose Link URI embeds the field token, because the platform substitutes the clicked field value into that token when building the URL. A POST action or a search action would not produce the browser navigation the portal expects, and omitting the token would drop the username entirely.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"71736d06-42fe-47ef-8a0e-fde349a423f3","label":null,"text":"A GET workflow action with Link URI `https://idp.example.com/user/$user$` and the field name `user`.","isCorrect":true},{"id":"210bc888-eb5f-4ec2-888e-95fa513ed81f","label":null,"text":"A POST workflow action with Link URI `https://idp.example.com/user/$user$` and the field name `user`.","isCorrect":false},{"id":"baf0dafd-8d56-43c6-a9c7-57ea77165c64","label":null,"text":"A search workflow action with a Search string that queries the identity portal index for the username.","isCorrect":false},{"id":"d47c5db3-3a16-4f47-aa4c-10ba387f5eb7","label":null,"text":"A GET workflow action with Link URI `https://idp.example.com/user/` and the field name `user`, relying on Splunk to append the value automatically.","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"dbdd89af-aa8f-4878-b567-455cdc3e45c1","slug":"which-two-of-the-following-are-true-regarding-the-order-of-o-cxc68","questionText":"Which TWO of the following are true regarding the order of operations when a macro is used in a search?","explanation":"Option A is correct because macro expansion occurs at search time, before the search is actually executed — the search head parses the search string, resolves any macro references into their underlying search fragments, and then runs the resulting expanded search. Option B is correct because macro expansion is context-sensitive: the current app context determines which macros are visible and how they resolve, so the same macro name can expand differently depending on the app in which the search runs. Option C is wrong because the indexer handles indexing and search-time data retrieval, not macro expansion, which is a search-head parsing activity. Option D is wrong because the browser merely submits the search; expansion happens server-side on the search head, not client-side. Option E is wrong because expansion must precede execution — a macro cannot be resolved after the search has already finished.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"hard","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"d790681e-7af5-41df-a4d0-c190e56a1a04","label":null,"text":"Macros are expanded before search execution","isCorrect":true},{"id":"f97b5d74-0538-4951-ba70-9e3e0734c1e1","label":null,"text":"Macros are expanded based on the current app context","isCorrect":true},{"id":"64243a59-be0e-46b3-b972-85202e22a46d","label":null,"text":"Macros are expanded by the Indexer","isCorrect":false},{"id":"c12fe25f-4f76-466e-a0a2-46de82c6a164","label":null,"text":"Macros are expanded by the browser","isCorrect":false},{"id":"20aaeafc-7ff9-4104-88ad-07996be873b4","label":null,"text":"Macros are expanded after the search finishes","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"2df25459-155b-44a0-882a-c9bb5feeedca","slug":"a-splunk-administrator-is-reviewing-an-accelerated-data-mode-y2aqs","questionText":"A Splunk administrator is reviewing an accelerated data model for network traffic. They notice that the acceleration summary contains only events from the last 7 days, but the data model is configured to retain 30 days of summaries. The administrator checks the acceleration settings and sees that the 'Acceleration time range' is set to 'All time'. What is the most likely reason for the discrepancy?","explanation":"Data model acceleration stores summarized results in a summary index. The retention of these summaries is governed by the retention policy of that index, not by the acceleration time range. If the summary index is configured to retain only 7 days of data, the acceleration summaries will only cover the last 7 days, regardless of the acceleration time range setting. Checking the summary index's retention policy resolves the discrepancy.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"c6470f17-5341-4c37-99e3-3d9bfb7de2be","label":null,"text":"The data model's acceleration is not enabled for the entire time range due to a permissions issue.","isCorrect":false},{"id":"23cedced-c50c-48aa-b2a4-fd32c86d4932","label":null,"text":"The data model's acceleration is using a summary index that has a retention policy of 7 days.","isCorrect":true},{"id":"73820e36-167b-4308-a5b3-78c54c91e5b3","label":null,"text":"The data model's acceleration is configured with a summary range that only covers the last 7 days.","isCorrect":false},{"id":"ed741f73-0467-405c-8af4-d87fdbdabdd4","label":null,"text":"The data model's acceleration is limited by the search head's available disk space, causing older summaries to be deleted.","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"88003057-c0b7-4339-a260-6df0a46ccab1","slug":"a-dashboard-panel-runs-a-search-that-aggregates-firewall-eve-q4nvd","questionText":"A dashboard panel runs a search that aggregates firewall events by src_ip. Users report the panel takes over a minute to render. The search uses `stats count by src_ip` after a base search that retrieves 30 days of data. The Search Inspector shows the search is reading far more events than needed, and the aggregation is spilling to disk. Which change is most likely to reduce the panel's render time while preserving the result?","explanation":"Replacing the raw-event aggregation with tstats uses indexed fields and tsidx summaries, eliminating full event retrieval and parsing. This directly addresses the excessive reads and disk spill shown by Search Inspector while returning the same counts, provided the field is indexed. The other options either change results, hide the symptom, or truncate data.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"de9a81e0-0e3d-4d11-8e88-fbbf4d47c5e2","label":null,"text":"Add `| head 10000` immediately after the base search to limit events.","isCorrect":false},{"id":"0b097bf9-85a4-4316-9953-a194e1966e1d","label":null,"text":"Increase the dashboard's refresh interval so the search runs less often.","isCorrect":false},{"id":"c21ac6da-adce-4037-9a4c-3868fdf20af2","label":null,"text":"Add `| tstats count where index=firewall by src_ip` to replace the base search and stats command.","isCorrect":true},{"id":"d8dadd45-bc69-4c7d-baa5-0b076b7759d1","label":null,"text":"Move the `stats` command earlier in the pipeline before any filtering commands.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"47b00781-00ed-4027-9cc4-0a54b405bd0b","slug":"when-configuring-a-csv-lookup-file-where-is-the-file-upload-d6ips","questionText":"When configuring a CSV lookup file, where is the file uploaded in Splunk?","explanation":"CSV lookup files in Splunk are managed as lookup table files, which are uploaded and stored via Settings > Lookups > Lookup table files. This is the dedicated location where Splunk stores the actual CSV content that lookup definitions reference. Once uploaded here, a lookup definition is created to bind the file to a name usable in SPL via the lookup command.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"5fa97c19-1eab-425d-83ea-42ffa3ae0a43","label":null,"text":"Settings > Indexes","isCorrect":false},{"id":"be001144-c3bd-4631-97cb-9e3bbafccb74","label":null,"text":"Settings > Field extractions","isCorrect":false},{"id":"a9b978be-007d-4438-a2ef-a4966124a733","label":null,"text":"Settings > Data inputs","isCorrect":false},{"id":"bedb7def-99e8-4e34-b6e2-3bce86873c6f","label":null,"text":"Settings > Lookups > Lookup table files","isCorrect":true}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"1d1ff041-862e-4431-a95b-a4df025c2573","slug":"which-configuration-file-would-you-modify-to-assign-a-tag-to-tc9ry","questionText":"Which configuration file would you modify to assign a tag to a field-value pair manually?","explanation":"The tags.conf file is the Splunk configuration file that defines tag definitions, mapping a tag name to specific field-value pairs (for example, tagging host=web01 with the tag 'production'). Manual assignment of a tag to a field-value pair is done by editing tags.conf, typically via Settings > Tags in Splunk Web or by directly editing the file in an app's local directory.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"d1fdcc89-2b0a-4ac7-8663-04cda54c39f7","label":null,"text":"props.conf","isCorrect":false},{"id":"96ee9103-f805-42b2-9aa2-23c076ee994e","label":null,"text":"tags.conf","isCorrect":true},{"id":"f2e3f622-3c0e-42f6-8c1e-140481d83e43","label":null,"text":"eventtypes.conf","isCorrect":false},{"id":"ed57031c-7b63-48fd-ad96-fab806039178","label":null,"text":"transforms.conf","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"9be5e3c1-6221-42a7-b89f-83f7c849516b","slug":"a-dashboard-panel-shows-a-timechart-of-web-request-latency-a-5akqd","questionText":"A dashboard panel shows a timechart of web request latency, and users want to click a point on the chart to open a new search in a separate window that lists the individual slow requests for that time. Which dashboard feature should you configure to enable this behavior?","explanation":"The requirement is an interactive, click-driven action that opens a detail search for a selected point. Drilldown configuration on the chart is the dashboard feature designed for this: it captures the clicked value, such as a timestamp, and passes it as a token to a target search that can open in a new window, showing the underlying slow requests.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"f0088fb8-09ed-44bf-b99c-90f56a142cf8","label":null,"text":"A scheduled alert that triggers when latency exceeds a threshold.","isCorrect":false},{"id":"ae011b93-6b85-47e8-9e4f-4d1bdf217299","label":null,"text":"A post-process search that reuses the panel's base search results.","isCorrect":false},{"id":"7340520e-0f24-41a9-b35c-427b9b098e8c","label":null,"text":"A drilldown defined on the chart with a link to a search that uses the clicked time as a token.","isCorrect":true},{"id":"94c95509-cd31-4d65-a6a9-838e41b45948","label":null,"text":"A token set by an input element that filters the dashboard's time range.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"6db32c5b-119f-4989-b362-8f58a8aa96e0","slug":"when-configuring-a-workflow-action-of-type-get-what-is-th-ao7b4","questionText":"When configuring a workflow action of type 'GET', what is the purpose of the 'Link URI' field?","explanation":"For a GET workflow action, the Link URI field specifies the target URL that the browser will request when the action is triggered. It typically includes field placeholders like $field$ that are substituted with the event's field values. This URI determines where the GET request is sent.","domainId":"c0bc9661-0e45-41fb-85f8-649825ddd7b7","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"4ad16c2c-476e-48c4-a774-2bb0919ff6e3","label":null,"text":"To provide the target URL for the GET request","isCorrect":true},{"id":"2bba569c-5188-4dba-a1bb-11596e28281c","label":null,"text":"To set the HTTP header for the request","isCorrect":false},{"id":"8ea2970a-a717-4086-9d92-3bf6ad1f28b0","label":null,"text":"To define the search query that the workflow action runs","isCorrect":false},{"id":"ca98ebb6-bf08-417c-be15-53f65423d0ad","label":null,"text":"To identify which index the data should be retrieved from","isCorrect":false}],"domainName":"Macros And Workflow Actions","domainSlug":"macros-and-workflow-actions"},{"id":"35ae84c8-a6cb-4bc3-b28c-f1f929a8906c","slug":"when-configuring-a-field-alias-in-props-conf-which-of-the-f-6dat5","questionText":"When configuring a field alias in props.conf, which of the following is true?","explanation":"When a field alias is configured in props.conf, the alias appears in the 'interesting fields' list in Splunk Web, allowing users to search by the alias name. The alias does not change the original field name; it provides an alternate name. Field aliases are applied at search time after field extraction, and they do not require an external CSV.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"2c709aa0-1f4b-40fd-aec1-3029318287f4","label":null,"text":"The alias appears in the 'interesting fields' list.","isCorrect":true},{"id":"224ebc3d-1fc1-4010-8411-8c54a127f50f","label":null,"text":"The alias name must be identical to the original field name.","isCorrect":false},{"id":"95741034-09a3-438f-8daa-d2faa32e53da","label":null,"text":"The alias is applied before field extraction.","isCorrect":false},{"id":"11a7e2c9-f32a-4f90-a7a6-11f26d44715d","label":null,"text":"The alias must reference an external CSV.","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"548c3e6b-a440-4a80-bdb9-535001b0dbcb","slug":"you-want-to-create-a-dropdown-input-that-populates-based-on-zkwqz","questionText":"You want to create a dropdown input that populates based on search results. Which XML element is required to define the source of the search for the input?","explanation":"In Splunk Simple XML dashboards, a dropdown input that populates from search results requires a <search> element to define the search query that generates the choices. The <search> element is nested within the <input> element (e.g., <input type=\"dropdown\">) and contains the SPL query. This is the standard way to dynamically populate dropdown options based on search results.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"3476fa0f-3119-4ae9-beca-d074d3dfbb6f","label":null,"text":"<data>","isCorrect":false},{"id":"654341d7-832b-4e5f-9417-b2b4eb690b61","label":null,"text":"<search>","isCorrect":true},{"id":"01b42238-ac16-47b7-8a4f-0956979522fb","label":null,"text":"<populate>","isCorrect":false},{"id":"904df9c9-b393-498c-b87d-c7c859688a8b","label":null,"text":"<query>","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"efd41525-a281-4544-a68f-383b0263a7ea","slug":"a-power-user-configures-an-automatic-lookup-that-enriches-ev-824eu","questionText":"A power user configures an automatic lookup that enriches events with a `priority` field from a CSV, and also defines a calculated field `severity = priority * 10` via EVAL in props.conf. After deploying, `severity` is always null. What is the cause?","explanation":"Calculated fields are evaluated during the field resolution phase, which precedes automatic lookup enrichment. Because priority is added only when the lookup runs, the EVAL expression sees no such field and produces null. Resolving this requires computing severity after enrichment, for example with an eval command placed after the lookup in the search, or by restructuring the enrichment so the dependency is satisfied.","domainId":"e49753b5-41bf-411c-90b9-a115e5fd14b3","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"e4b58988-c78b-4223-ae8f-651c94e66e6b","label":null,"text":"Calculated fields are evaluated before automatic lookups run, so priority does not exist yet when severity is computed","isCorrect":true},{"id":"76f48e91-9089-4f71-af57-85da7b0d7363","label":null,"text":"The CSV lookup does not support numeric fields, so priority cannot be multiplied","isCorrect":false},{"id":"6b2f8841-1f8e-438c-8c08-392dadfb1b0b","label":null,"text":"The lookup definition must set `max_matches` to a value greater than one for the enriched field to be visible to EVAL","isCorrect":false},{"id":"f4445ef6-b2e8-4204-a59e-b3d473ccbcad","label":null,"text":"The EVAL expression must use the `eval` command syntax with quotes around field names","isCorrect":false}],"domainName":"Field Management And Calculated Fields","domainSlug":"field-management-and-calculated-fields"},{"id":"df0384b7-2182-449a-8de8-eae93897808e","slug":"what-is-the-difference-between-chart-and-timechart-bqn1q","questionText":"What is the difference between 'chart' and 'timechart'?","explanation":"The key difference is that timechart automatically buckets events by time and plots the results over time, while chart does not automatically bucket by time and can be used with any field. Timechart is specifically designed for time-series visualizations.","domainId":"f18567fc-eec5-4735-a00e-a3c59204bd48","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"a95338d5-7534-4c9f-a795-4938a4d20aca","label":null,"text":"Timechart automatically buckets by time.","isCorrect":true},{"id":"7086f346-5bf9-4054-be94-ca4fc0227f87","label":null,"text":"They are identical commands.","isCorrect":false},{"id":"4c975a20-1576-40f6-8e43-5698bad5a50a","label":null,"text":"Chart is for time-based data.","isCorrect":false},{"id":"8ec1a50a-3f66-48f8-841c-9b9f9784f18c","label":null,"text":"Timechart is for non-time fields.","isCorrect":false}],"domainName":"Transforming Commands And Formatting","domainSlug":"transforming-commands-and-formatting"},{"id":"fd13af38-0a29-4f62-99db-58a7e8df8e96","slug":"which-two-pieces-of-information-must-be-provided-when-defini-pybai","questionText":"Which TWO pieces of information must be provided when defining a lookup table file upload?","explanation":"$6b","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"7e0bc78b-c892-4242-9120-3728c53dddad","label":null,"text":"Lookup definition","isCorrect":false},{"id":"7620c4e3-c90c-44e9-9682-acc4037976e9","label":null,"text":"Destination Filename","isCorrect":true},{"id":"ea73d205-8019-4c22-836f-115a61476a25","label":null,"text":"Lookup index","isCorrect":false},{"id":"d46995aa-ca11-42fb-8024-a1ff6a7a7d4d","label":null,"text":"Field aliases","isCorrect":false},{"id":"e488ca8e-c3f7-475c-8705-e37998307355","label":null,"text":"Destination App","isCorrect":true}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"34fa8b62-cd03-4ecb-9dba-4614489580cc","slug":"which-search-command-is-used-to-display-the-contents-of-a-lo-56gy4","questionText":"Which search command is used to display the contents of a lookup table?","explanation":"The 'inputlookup' command is specifically designed to read and display the contents of a lookup table file (CSV or KV Store) as search results. It is the standard command for viewing lookup data without joining it to an event stream. Running '| inputlookup mylookup.csv' returns all rows and columns from the lookup.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"easy","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"292411b2-ddd7-48f2-8f90-84822f71fb35","label":null,"text":"table","isCorrect":false},{"id":"9ead88d2-abef-4f83-88f5-c097b918db9e","label":null,"text":"inputlookup","isCorrect":true},{"id":"b17ea13e-00c6-4dc6-b9fa-b860b6c3619c","label":null,"text":"lookup","isCorrect":false},{"id":"3cd4a9ec-07d7-4a24-a634-cec42a25f83f","label":null,"text":"outputlookup","isCorrect":false}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"},{"id":"4514e787-a81c-4d9c-aa7e-6d9a0d6744a0","slug":"which-two-of-the-following-statements-about-pivot-are-true-x6maz","questionText":"Which TWO of the following statements about Pivot are true?","explanation":"Option A is correct because Pivot filters can be saved as reports, allowing users to preserve and reuse their configured filter settings for later analysis. Option C is correct because Pivot provides a graphical user interface that generates SPL (Search Processing Language) commands behind the scenes, enabling users to build visualizations without writing SPL manually. Option B is incorrect because Pivot does support calculations through its interface. Option D is incorrect because Pivot does not require accelerated data models for all use cases, though acceleration can improve performance. Option E is incorrect because Pivot does not automatically delete raw data.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"019c02a0-8265-4644-b79a-1510c6adb66c","label":null,"text":"Pivot filters can be saved as reports","isCorrect":true},{"id":"4dfda024-de23-4aed-ab26-131ba2a0ab41","label":null,"text":"Pivot cannot perform calculations","isCorrect":false},{"id":"f8644a71-f33f-4a4a-bf7f-08520e0eb829","label":null,"text":"Pivot provides a GUI to generate SPL","isCorrect":true},{"id":"20103ac6-2175-47d4-a060-d13cb0f56db7","label":null,"text":"Pivot can only be used with accelerated data models","isCorrect":false},{"id":"4947ec0c-e607-4fa6-b6ee-f8cd105628b1","label":null,"text":"Pivot automatically deletes raw data","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"813925b9-584f-4a9c-9745-bb3483c8c79e","slug":"a-splunk-administrator-is-configuring-a-new-data-model-to-ac-ffr2h","questionText":"A Splunk administrator is configuring a new data model to accelerate a large volume of firewall logs. The administrator wants to ensure that the acceleration summary files are as small as possible while still supporting the required searches. Which of the following actions would best achieve this goal?","explanation":"To minimize summary file size, you should accelerate only the essential data model objects and fields, and restrict the acceleration time range to the period that requires fast searching. This reduces the volume of data that is summarized and stored. Accelerating everything or extending the time range increases storage usage. Infrastructure improvements do not affect summary file size. Selective acceleration is the most effective strategy for balancing performance and storage.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"9fa3c63b-70b4-431a-b330-e597caf1c765","label":null,"text":"Set the acceleration time range to cover the entire retention period of the index.","isCorrect":false},{"id":"7c0fde8d-224c-42c7-ad89-4becaffe910e","label":null,"text":"Accelerate only the specific event objects and fields that are required for the planned searches, and set a shorter acceleration time range.","isCorrect":true},{"id":"167e4d2d-9d80-4199-a6bd-72c77dff6dbb","label":null,"text":"Enable acceleration on all root event objects and child objects to ensure comprehensive coverage.","isCorrect":false},{"id":"1b9d9aaf-3277-4b44-ae8a-b4973483510c","label":null,"text":"Use a high-performance indexer and increase the number of search heads to distribute the acceleration load.","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"138192e1-37f4-4f4e-be0b-1263a562f430","slug":"which-three-of-the-following-are-potential-causes-for-a-data-dsxmy","questionText":"Which THREE of the following are potential causes for a data model to fail to accelerate?","explanation":"Option B is correct because data model acceleration builds and maintains summary files (tsidx) on the indexers, so if the indexer runs out of disk space the acceleration process cannot write or update those summaries and the model fails to accelerate. Option C is correct because acceleration is driven by the base search defined in the data model; if that base search is invalid or returns no results, there is nothing to accelerate and the acceleration job fails or produces no data. Option D is correct because acceleration must be explicitly enabled on the data model (the 'accelerated' setting), and if it is not set to accelerated, no acceleration job runs at all. Option A does not belong because having 'admin' rights is a permissions/role attribute that does not by itself prevent acceleration. Option E does not belong because browser caching affects client-side display of search results, not the server-side acceleration process.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"hard","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"fc44c436-d52a-4474-a0b1-246702e884a1","label":null,"text":"The user has 'admin' rights","isCorrect":false},{"id":"97da66bc-fd54-40a3-85ac-5991dec71702","label":null,"text":"The indexer is running out of disk space","isCorrect":true},{"id":"dd89db7b-aeca-4f9f-8a5a-110098384522","label":null,"text":"The base search is invalid or returns no results","isCorrect":true},{"id":"a701b403-2e1f-43d6-9de9-4483ada35dc4","label":null,"text":"The data model is not set to 'accelerated'","isCorrect":true},{"id":"061e001e-39de-440b-8046-12983889b7af","label":null,"text":"The browser is cached","isCorrect":false}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"7587b491-a572-4be8-be3e-413e49d19d48","slug":"you-are-optimizing-a-dashboard-that-uses-several-panels-with-9yvp4","questionText":"You are optimizing a dashboard that uses several panels with inline searches. You want to reduce the overall search load and improve performance. Which two actions should you take? (Choose two.)","explanation":"A base search with post-process searches reduces redundant scanning by running the heavy search once and sharing results. Report acceleration precomputes results for saved searches, cutting disk reads. Both directly lower search load. The other options either increase resource usage or do not address the underlying data scanning, so they are not effective optimizations.","domainId":"7f944252-567a-42b1-9d99-60c59cce2532","difficulty":"medium","questionType":"multi_select","pbqConfig":null,"exhibitText":null,"options":[{"id":"fae185d8-0e72-4410-8d25-6b411df5bf3f","label":null,"text":"Enable report acceleration on saved searches that power the panels, where the searches are eligible for acceleration.","isCorrect":true},{"id":"5edcb43d-d969-4af1-bb9f-882a51bd08a1","label":null,"text":"Replace multiple inline searches that share the same base dataset with a single base search and post-process searches.","isCorrect":true},{"id":"cda5f09f-91bf-423b-9cbd-687ae1e067b9","label":null,"text":"Set the dashboard's refresh interval to a very short value, such as 1 second, to ensure data is always current.","isCorrect":false},{"id":"83fc14d0-94a1-4a74-88c0-f0236c36a6ee","label":null,"text":"Convert all panel searches to real-time searches to avoid waiting for scheduled searches to complete.","isCorrect":false},{"id":"346cf983-1c6f-42cf-a709-317791bc8940","label":null,"text":"Add the dedup command to every panel search to reduce the number of events returned.","isCorrect":false}],"domainName":"Search Tuning Performance And Dashboards","domainSlug":"search-tuning-performance-and-dashboards"},{"id":"78026dab-a2e4-4b67-81e1-515faee08143","slug":"a-splunk-power-user-is-building-a-data-model-for-firewall-lo-ecy23","questionText":"A Splunk power user is building a data model for firewall logs. They want to include a calculated field that concatenates the source IP and destination IP into a single field named 'src_dest_pair'. The field should be available for Pivot users without them needing to write SPL. Which data model field type should they use?","explanation":"An eval expression field is designed for creating calculated fields within a data model using eval functions. It allows concatenation of existing fields, such as combining source and destination IPs into a new field. This field is then available in Pivot, enabling users to analyze the combined data without writing SPL. Other field types like lookup, regex, or object do not perform calculations on existing fields.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"64c5d7fa-e8ed-45fc-95bf-3f7007d148c8","label":null,"text":"Object field","isCorrect":false},{"id":"afd95d17-d107-4bd3-a709-27b8a33280fd","label":null,"text":"Lookup field","isCorrect":false},{"id":"ef20e89d-96d0-4af0-85f0-0545661150d1","label":null,"text":"Regex field","isCorrect":false},{"id":"2b320dab-d132-44d2-a9c5-f296c207b929","label":null,"text":"Eval expression field","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"65b9e090-dfc3-4b15-b32d-8c2f6858bf60","slug":"a-splunk-power-user-is-using-pivot-to-analyze-authentication-74g5v","questionText":"A Splunk power user is using Pivot to analyze authentication events. The user wants to see the number of failed logins per user over the last 24 hours. Which CIM data model and object should be used to achieve this?","explanation":"The Authentication data model is specifically designed for authentication events, including successful and failed logins. The Failed_Authentication object contains fields like `user` and `action`, enabling Pivot to count failed logins per user. This directly addresses the requirement.","domainId":"145b8276-30fe-4740-99ac-445d367a12f4","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"cc0c7e3b-b870-4c2c-b498-090a1c66deb5","label":null,"text":"Web data model, Web_Sessions object.","isCorrect":false},{"id":"be917e0f-f0af-4426-8ca9-d65e84903b72","label":null,"text":"Intrusion_Detection data model, Attack object.","isCorrect":false},{"id":"b99b7d4d-f472-4438-9804-13f1e08552e4","label":null,"text":"Network_Traffic data model, All_Traffic object.","isCorrect":false},{"id":"0fc5db80-b8cc-4795-8bf2-519c7d4c92d8","label":null,"text":"Authentication data model, Failed_Authentication object.","isCorrect":true}],"domainName":"Data Models And CIM","domainSlug":"data-models-and-cim"},{"id":"a7277f52-5ce4-4030-a85d-a66b0820e001","slug":"which-of-the-following-is-a-key-advantage-of-using-kv-store-0yrxk","questionText":"Which of the following is a key advantage of using KV Store lookups over CSV lookups?","explanation":"KV Store lookups support dynamic updates and preserve data types, unlike CSV lookups which are static files. This makes KV Store ideal for lookups that change frequently or require field-type fidelity. CSV lookups are read-only at search time and treat all values as strings.","domainId":"dd703481-a1b9-473b-aa03-16e46e77ada2","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"32b27b28-111c-4b65-aaf9-421012c5cdff","label":null,"text":"They support dynamic updates and data types.","isCorrect":true},{"id":"877e191d-8de2-4028-aa26-60897a665872","label":null,"text":"They don't require lookup definitions.","isCorrect":false},{"id":"210d51f6-6e46-4f08-9720-5512b86b2585","label":null,"text":"They use less disk space.","isCorrect":false},{"id":"850dad92-6cd8-4087-a2ff-f58d3d0a5dfb","label":null,"text":"They are faster for static data.","isCorrect":false}],"domainName":"Lookups And Alerts","domainSlug":"lookups-and-alerts"}],"pbqCount":0,"timed":false,"studyMode":true,"durationSeconds":3600,"vendorSlug":"splunk","examSlug":"splunk-adv-power","examName":"Splunk Core Certified Advanced Power User (SPLK-1004) (SPLK-1004)","examCode":"SPLK-1004","isGuest":true,"examTrackId":"b91c7f26-aece-4c09-bf9e-a5aaa7772462","userId":"$undefined"}]] </article></body></html>

SPLK-1004 practice exam session