Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam
New Member

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

 

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months. 

Labels (2)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
Systematically retaking the exam I got 100% with answer choice: 
(D) failed OR password OR "failed password"
Raspberries to you!

Tags (1)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
"HEY SPLUNK ADMIN!...wanna chime in here please?"

 

Tags (1)
0 Karma

youngsuh
Contributor

The value that are return is without quotes.  Hope that helps. 

Get Updates on the Splunk Community!

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...