Training + Certification Discussions

Incorrect Answer to Question in Intro to Splunk (eLearning)

baristatam
New Member

The question is "Which of the following searches will return results containing the phrase "failed password"?

A: failed password

B: `failed password`

C: "failed password"

😧 (failed password)

 

The quiz says that A is the correct answer, when the answer should be C. Without quotes you will get events with failed and password in them, but not necessarily as a PHRASE as the question states. Could this please be corrected? I was struggling to get 100% on this quiz until I found a Reddit post showing the answer to this question has been incorrect for at least 7 months. 

Labels (2)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
Systematically retaking the exam I got 100% with answer choice: 
(D) failed OR password OR "failed password"
Raspberries to you!

Tags (1)
0 Karma

FrustratedUser
New Member

Looks like the question was modified since your post last year. Now the question is : 

Which of the following searches will return results containing the terms failed, password, or failed password?

  1. failed OR password
  2. failed password OR "failed password" 
  3. fail*
  4. failed OR password OR "failed password"

This still is confusing because I'm also not getting 100% which is mandated by my client. Fine.. but Even two different AI's are giving me mixed answers: D should be the only correct answer. Some others point that A&D are and one says only A. I got time, I'm doing them all until I can zero in on the correct answer..still not getting it. 
"HEY SPLUNK ADMIN!...wanna chime in here please?"

 

Tags (1)
0 Karma

youngsuh
Contributor

The value that are return is without quotes.  Hope that helps. 

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...