Quick Answer

The answer is the Jobs page, Search bar, and Data Summary button, as these three features are all accessible to a Splunk Core Certified User within the default interface. This is correct because the Splunk default interface provides core navigation and search management tools to every user regardless of their role, meaning a Core Certified User can use the Search bar to enter SPL queries and set time ranges, click the Data Summary button to explore available sourcetypes, hosts, and indexes, and access the Jobs page to view and manage their own running and completed searches. On the SPLK-1002 exam, this question tests your understanding of universal interface components versus role-restricted features like knowledge objects or alerts, which require additional permissions. A common trap is assuming the Jobs page is only for admins, but it is actually a standard tool for any user to monitor their own search activity. Memory tip: think of the three S’s—Search bar, Summary button, and Search Jobs—as the core trio available to every certified user.