Splunk Exam SPLK-2003 Topic 10 Question 55 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 55
Topic #: 10

[All SPLK-2003 Questions]

A filter block with only one condition configured which states: artifact.*.cef .sourceAddress !- , would permit which of the following data to pass forward to the next block?

ANull IP addresses

BNon-null IP addresses

CNon-null destinationAddresses

DNull values

Show Suggested Answer

Suggested Answer: D

by Georgiann at Sep 12, 2024, 11:04 PM

Limited Time Offer

25%

Off

Get Premium SPLK-2003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lorrine

2 months ago

Haha, this question is so tricky! I bet the answer is gonna be something totally unexpected, like C) Non-null destinationAddresses. The filter block is only checking sourceAddress, but maybe it'll pass through the destinationAddress instead!

upvoted 0 times

India

1 months ago

User 3: I'm leaning towards A) Null IP addresses, but this question is definitely tricky!

upvoted 0 times

...

Louvenia

1 months ago

No way, I'm pretty sure it's D) Null values.

upvoted 0 times

...

Dusti

2 months ago

I think the answer is B) Non-null IP addresses.

upvoted 0 times

...

Jerry

2 months ago

I'm not sure about this one. The wording is a bit confusing. I'm leaning towards B) Non-null IP addresses, but I could see an argument for D) Null values too.

upvoted 0 times

...

Rikki

2 months ago

I'm going with D) Null values. The question says the filter block has 'only one condition', and that condition is looking for non-null sourceAddresses, so it should let those null values through.

upvoted 0 times

Colby

1 months ago

D: That makes sense, the condition is looking for non-null sourceAddresses so null values should pass through.

upvoted 0 times

...

Franchesca

2 months ago

C: Actually, I'm going with D) Null values.

upvoted 0 times

...

Belen

2 months ago

B: I disagree, I believe it's C) Non-null destinationAddresses.

upvoted 0 times

...

Kanisha

2 months ago

A: I think it's B) Non-null IP addresses.

upvoted 0 times

...

Vanda

2 months ago

B) Non-null IP addresses seems like the correct answer here. The filter block is only looking for non-null sourceAddresses, so it should pass those forward.

upvoted 0 times