Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam
New Member

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

 

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months. 

Labels (2)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
Systematically retaking the exam I got 100% with answer choice: 
(D) failed OR password OR "failed password"
Raspberries to you!

Tags (1)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
"HEY SPLUNK ADMIN!...wanna chime in here please?"

 

Tags (1)
0 Karma

youngsuh
Contributor

The value that are return is without quotes.  Hope that helps. 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...

Keep the Learning Going with the New Best of .conf Hub

Hello Splunkers, With .conf26 getting closer, there’s already a lot of excitement building around this year’s ...