Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk Exam SPLK-1001 Topic 6 Question 104 Discussion

Actual exam question for Splunk's SPLK-1001 exam
Question #: 104
Topic #: 6
[All SPLK-1001 Questions]

Which search string matches only events with the status_code of 4:4?

Show Suggested Answer Hide Answer
Suggested Answer: B

Explanation/Reference:


Contribute your Thoughts:

Simona
4 days ago
Hmm, A is just asking for trouble. Who wants to match everything except 404? Not me!
upvoted 0 times
...
Mammie
7 days ago
C is the winner! I like how it covers the full range of 4xx errors.
upvoted 0 times
...
Jackie
13 days ago
I'm going with B. Seems like the simplest way to get all the 4xx status codes.
upvoted 0 times
...
Adria
15 days ago
Option D looks like the most specific match to me. Gotta love those precise search strings!
upvoted 0 times
...
Lorrine
19 days ago
But D includes status_code>403 and status_code<405, which is not just 4:4.
upvoted 0 times
...
Deeann
21 days ago
I disagree, I believe the answer is A.
upvoted 0 times
...
Lorrine
25 days ago
I think the answer is D.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77