Control a Search Job SPLK-1001 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst runs a search over a 30-day window to count failed login attempts. After 10 minutes, the search is still running and the analyst notices the progress bar in the Job Inspector shows only 40% complete. The analyst needs the partial results immediately to share with a manager who is waiting. What should the analyst do?

   • AClick Pause to halt the search and then click Resume to force it to complete faster.
   • BClick Finalize in the Job Inspector to stop the search and retrieve the partial results.
   • CClick Export on the Search page to download the partial results as a CSV file.
   • DClick Stop to terminate the search, then re-run the same search with a shorter time range.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A user launches a search that processes a large volume of data. The user wants to see how much of the search has completed and estimate the remaining time. Where should the user look?

   • AOpen the Job Inspector to view the progress bar and status of the running search.
   • BLook at the Statistics tab of the Search page.
   • CCheck the Search History page to see the list of past searches.
   • DReview the Jobs page to see the job's expiration time.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   While a search is running in the Search app, which control is used to halt the job before it reaches completion?

   • AThe Job Inspector button
   • BThe Resume button
   • CThe Stop button
   • DThe Export button
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A user accidentally starts a search that is scanning too much data and will take a very long time. The user wants to cancel the search immediately and remove it from the Jobs list. What should the user do?

   • AClick Finalize in the Job Inspector to stop the search and keep partial results.
   • BChange the time range in the search properties to reduce the scope.
   • CClick Pause in the Job Inspector to halt the search.
   • DClick Stop in the Job Inspector, then delete the job from the Jobs page.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A user has a completed search job that will expire soon. The user wants to keep the results available for a longer period for future analysis. What should the user do?

   • AFinalize the completed job to reset its expiration time.
   • BDelete the job and re-run the search to create a new job.
   • CChange the job expiration time in the Job Inspector to a later time.
   • DPause the completed job to prevent it from expiring.
   Reveal Solution Discussion Select an answer first