Join the Conversation
- Learning
- :
- Training & Certification
- :
- Training + Certification Discussions
- :
- Incorrect Answer to Question in Intro to Splunk (e...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Incorrect Answer to Question in Intro to Splunk (eLearning)
The question is "Which of the following searches will return results containing the phrase "failed password"?
A: failed password
B: `failed password`
C: "failed password"
😧 (failed password)
The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Looks like the question was modified since your post last year. Now the question is :
Which of the following searches will return results containing the terms failed, password, or failed password?
- failed OR password
- failed password OR "failed password"
- fail*
- failed OR password OR "failed password"
This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it.
Systematically retaking the exam I got 100% with answer choice:
(D) failed OR password OR "failed password"
Raspberries to you!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Looks like the question was modified since your post last year. Now the question is :
Which of the following searches will return results containing the terms failed, password, or failed password?
- failed OR password
- failed password OR "failed password"
- fail*
- failed OR password OR "failed password"
This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it.
"HEY SPLUNK ADMIN!...wanna chime in here please?"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The value that are return is without quotes. Hope that helps.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
May 2026 Splunk Expert Sessions: Security & Observability
Network to App: Observability Unlocked [May & June Series]
SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...
