Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam
New Member

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

 

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months. 

Labels (2)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
Systematically retaking the exam I got 100% with answer choice: 
(D) failed OR password OR "failed password"
Raspberries to you!

Tags (1)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
"HEY SPLUNK ADMIN!...wanna chime in here please?"

 

Tags (1)
0 Karma

youngsuh
Contributor

The value that are return is without quotes.  Hope that helps. 

Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...