Splunk Certified Developer (SPLK-2001) Free Practice Test

Question 1

Which Splunk REST endpoint is used to create a KV store collection?

A. /storage/kvstore/collections

B. /storage/collections/config

C. /storage/collections

D. /storage/kvstore/create

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

How can event logs be collected from a remote Windows machine using a standard Splunk installation and no customization? (Select all that apply.)

A. By using HTTP event collector.

B. By using a Windows universal forwarder.

C. By using a Windows heavy forwarder.

D. By configuring a WMI input.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

What must be done when calling the service NS endpoint?

A. Pass the user and app context in the request payload.

B. Authenticate with the user of the required context.

C. Specify the user and app context in the URI.

D. Authenticate with an admin user.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which of the following are security best practices for Splunk app development? (Select all that apply.)

A. Implement security in software development lifecycle.

B. Use a dynamic scanner such as OWASP ZAP to scan web application components for vulnerabilities.

C. Manually test application with the controls listed in the OWASP Security Testing Guide.

D. Store passwords in clear text in .conf files.

Correct Answer: A,B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of these URLs could be used to construct a REST request to search the employee KV store collection to find records with a rating greater than or equal to 2 and less than 5?

A. 'http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={$and:[{rating:{$gte:2}},{rating:{$lt:5}}]}
&output_mode-json'

B. 'http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={%22rating%22:{%22$gte%22:2}},{%22$and%22},{%22rating%22:{%
22$lt%22:5}}}
&output_mode=json'

C. 'http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={%22$and%22:[{%22rating%22:{%22$gte%22:2}},{%22rating%22:{%
22$lt%22:5}}]}
&output_mode=json'

D. 'http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={$and:[{rating:$gte:2}},{rating:{$lt:5}}]}
&output_mode=json'

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)

A. Review the OWASP Top Ten List.

B. Review the OWASP Secure Coding Practices Quick Reference Guide.

C. Ensure that third-party libraries that the app depends on have no outstanding CVE vulnerabilities.

D. Store passwords in clear text in .conf files.

Correct Answer: A,B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which of the following statements describe one-shot searches? (Select all that apply.)

A. Are always executed asynchronously.

B. Can specify csv as an output format.

C. Stream all results upon search completion.

D. Can use autocancel to set a timeout limit.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Splunk Certified Developer (SPLK-2001) Free Practice Test