Splunk Certified Developer Free Sample Questions

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:

index news sourcetype web_proxy | table sourcetype title link

Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

When updating a knowledge object via REST, which of the following are valid values for the sharing Access Control List property?

Which of the following are ways to get a list of search jobs? (Select all that apply.)

Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

After updating a dashboard in myApp, a Splunk admin moves myApp to a different Splunk instance. After logging in to the new instance, the dashboard is not seen.

What could have happened? (Select all that apply.)

Which of the following statements define a namespace?

Which of the following are characteristics of an add-on? (Select all that apply.)

Which of the following statements describe oneshot searches? (Select all that apply.)

Which of the following options would be the best way to identify processor bottlenecks of a search?

Which of the following is true of a namespace?

What must be done when calling the serviceNS endpoint?

A developer is building a custom application for a logistics company. The app requires a dashboard that displays shipment statuses. The developer needs to initialize a token named default_region to the value "NorthAmerica" as soon as the dashboard loads, before any user interaction occurs. Which Simple XML element should be used to achieve this?

A security operations team needs to export a large volume of search results (approx. 500,000 events) from a Splunk search job using a Python script. They want to minimize memory usage on the client side by processing results as they stream. Which REST endpoint and output_mode combination is optimal for this requirement?

A developer is creating a KV Store collection named device_inventory to store hardware asset details. The collection must support a hierarchy of users where only the admin role can write data, but power users can read it. Which configuration file must be modified to define the collection structure, and which file handles the access control list (ACL)? (Select TWO)

While developing a dashboard for a financial application, you need to pass a token named account_id to a drilldown URL. The account_id value might contain spaces or special characters that could break the URL structure. Which token filter should be applied to ensuring the value is properly URL-encoded?