- (Exam Topic 2)
which of the following are valid options with the chart command

1. A. useother
2. B. usenull
3. C. fillfield
4. D. usefiled

Correct Answer: AB

- (Exam Topic 1)
In what order arc the following knowledge objects/configurations applied?

1. A. Field Aliases, Field Extractions, Lookups
2. B. Field Extractions, Field Aliases, Lookups
3. C. Field Extractions, Lookups, Field Aliases
4. D. Lookups, Field Aliases, Field Extractions

Correct Answer: B

- (Exam Topic 1)
To identify all of the contributing events within a transaction that contains at least one REJECT event, which syntax is correct?

1. A. Index-main | REJECT trans sessionid
2. B. Index-main | transaction sessionid | search REJECT
3. C. Index=main | transaction sessionid | whose transaction=reject
4. D. Index=main | transaction sessionid | where transaction=reject’’

Correct Answer: D

- (Exam Topic 1)
A calculated field maybe based on which of the following?

1. A. Lookup tables
2. B. Extracted fields
3. C. Regular expressions
4. D. Fields generated within a search string

Correct Answer: B

- (Exam Topic 1)
Which of the following statements about tags is true?

1. A. Tags are case insensitive.
2. B. Tags are created at index time.
3. C. Tags can make your data more understandable.
4. D. Tags are searched by using the syntax tag: : <fieldneme>

Correct Answer: C