topic Re: Incorrect Answer to Question in Intro to Splunk (eLearning) in Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam — Fri, 24 May 2024 17:38:16 GMT

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months.

Re: Incorrect Answer to Question in Intro to Splunk (eLearning)

youngsuh — Fri, 24 May 2024 19:24:49 GMT

The value that are return is without quotes. Hope that helps.

Re: Incorrect Answer to Question in Intro to Splunk (eLearning)

FrustratedUser — Fri, 05 Sep 2025 14:05:41 GMT

Looks like the question was modified since your post last year. Now the question is :

Which of the following searches will return results containing the terms failed, password, or failed password?

failed OR password
failed password OR "failed password"
fail*
failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it.
"HEY SPLUNK ADMIN!...wanna chime in here please?"

Re: Incorrect Answer to Question in Intro to Splunk (eLearning)

FrustratedUser — Fri, 05 Sep 2025 14:14:57 GMT

Looks like the question was modified since your post last year. Now the question is :

Which of the following searches will return results containing the terms failed, password, or failed password?

failed OR password
failed password OR "failed password"
fail*
failed OR password OR "failed password"