Exam SPLK-1001 All QuestionsBrowse all questions from this exam
Question 183

Which of the following is the most efficient search?

    Correct Answer: D

    The most efficient search is the one that minimizes the scope of the search to the most specific possible subset of data. By using 'index=security ג€failed passwordג€', the query targets a specific index (security) without using wildcards, making it more efficient than other options which search across all indexes or use an OR condition. Specifying the exact index significantly narrows down the amount of data to be searched, leading to faster and more efficient results.

Discussion
nicksssOption: D

Also think D is correct for the same reason shergar mentioned.

shergarOption: D

Think it should be D, that has only a specific index and specific search terms. Wildcard in the index is going to search all indexes, which is not efficient

solomoneOption: A

While I agree wildcards are not efficient, but failed passwords can show up in other indexes besides security and since they don't specify I think A is actually correct.

awsguy21Option: D

Best without wildcards, D is the answer.

IndyAnnaJoOption: D

Answer is definitely D, most efficient searches are without wildcards

kiki533Option: D

D 9 is efficient