- (Exam Topic 1)
Which of the following are required to create a POST workflow action?

1. A. Label, URI, search string.
2. B. XMI attributes, URI, name.
3. C. Label, URI, post arguments.
4. D. URI, search string, time range picker.

Correct Answer: B

- (Exam Topic 2)
What will you learn from the results of the following search? sourcetype=cisco_esa | transaction mid, dcid, icid | timechart avg(duration)

1. A. The average time elapsed during each transaction for all transactions
2. B. The average time for each event within each transaction
3. C. The average time between each transaction

Correct Answer: A

- (Exam Topic 1)
Which delimiters can the Field Extractor (FX) detect? (select all that apply)

1. A. Tabs
2. B. Pipes
3. C. Spaces
4. D. Commas

Correct Answer: ABCD

- (Exam Topic 1)
In which of the following scenarios is an event type more effective than a saved search?

1. A. When a search should always include the same time range.
2. B. When a search needs to be added to other users' dashboards.
3. C. When the search string needs to be used in future searches.
4. D. When formatting needs to be included with the search string.

Correct Answer: D

- (Exam Topic 2)
Using the export function, you can export search results as _______.( Select all that apply)

1. A. Xml
2. B. Json
3. C. Html
4. D. A php file

Correct Answer: AB