Free Splunk SPLK-1002 Actual Exam Questions - Question 7 Discussion

It’s D because a POST action usually needs to specify the URI, when to run (time range), and what to search for (search string). Post arguments might be optional or combined with search string here.

A/C? Label and URI are must-haves, but post arguments in C are what really define a POST action’s payload. Search string in A feels more like a filter, not data to send. So C makes more sense to me.

A/C? Label and URI are definitely needed. Post arguments (C) seem crucial for sending data, but maybe some systems use a search string (A) to define the payload instead. Not fully sure which is mandatory though.

Not B, since XMI attributes don’t seem relevant to creating a POST workflow action. The key parts should involve actual data you send, so label, URI, and post arguments in C make more sense here.

Maybe A makes sense too since a label would identify the action, URI is needed for the endpoint, and search string could be used to specify what data to post. D’s time range picker seems unrelated.

I was also unsure, but D doesn’t really fit since a time range picker seems unrelated to POST actions. So I’m thinking it’s not D. C still sounds best because post arguments make sense. C

This one’s kinda confusing. I thought for sure you need the label and URI, but then the other parts threw me off. I went with C because post arguments sound right for a POST action. Anyone else get stuck here?