Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam
New Member

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

 

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months. 

Labels (2)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
Systematically retaking the exam I got 100% with answer choice: 
(D) failed OR password OR "failed password"
Raspberries to you!

Tags (1)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
"HEY SPLUNK ADMIN!...wanna chime in here please?"

 

Tags (1)
0 Karma

youngsuh
Contributor

The value that are return is without quotes.  Hope that helps. 

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...