{"id":18426,"date":"2026-09-22T07:16:04","date_gmt":"2026-09-22T07:16:04","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18426"},"modified":"2026-09-22T07:16:04","modified_gmt":"2026-09-22T07:16:04","slug":"splunk-splk-1001-practice-test-questions-and-exam-dumps-part-11-q201-220","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/splunk-splk-1001-practice-test-questions-and-exam-dumps-part-11-q201-220\/","title":{"rendered":"Splunk SPLK-1001 Practice Test Questions and Exam Dumps Part 11 Q201-220"},"content":{"rendered":"

View Full<\/b> Splunk SPLK-1001 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/p>\n

 <\/p>\n

Question: 201. In Splunk, which command is used to filter search results based on a specified condition?<\/b><\/p>\n

    \n
  1. <\/b> stats<\/span>
    \n<\/span>2.<\/b> table<\/span>
    \n<\/span>3.<\/b> rename<\/span>
    \n<\/span>4.<\/b> search<\/span><\/li>\n<\/ol>\n

    Correct Answer:<\/b> 4. <\/span>search<\/span><\/p>\n

    Explanation:<\/b><\/p>\n

    The <\/span>search<\/span> command is used to filter events or search results based on specified criteria. It can be used explicitly in a pipeline, although the initial search portion of a Splunk search can also perform filtering without writing the <\/span>search<\/span> command itself. For example, <\/span>index=web status=404<\/span> effectively applies search filtering to events. The command can also be placed later in a pipeline when you want to filter the results produced by another command. Commands such as <\/span>stats<\/span> summarize data, <\/span>table<\/span> selects fields for display, and <\/span>rename<\/span> changes field names, so they do not perform the same filtering role as <\/span>search<\/span>.<\/span><\/p>\n

    Question: 202. Which Splunk command is commonly used to select specific fields and remove unwanted fields from the search results?<\/b><\/p>\n

      \n
    1. <\/b> fields<\/span>
      \n<\/span>2.<\/b> chart<\/span>
      \n<\/span>3.<\/b> transaction<\/span>
      \n<\/span>4.<\/b> top<\/span><\/li>\n<\/ol>\n

      Correct Answer:<\/b> 1. <\/span>fields<\/span><\/p>\n

      Explanation:<\/b><\/p>\n

      The <\/span>fields<\/span> command controls which fields are retained in the search results. You can specify fields that should be included or excluded, helping reduce the amount of unnecessary field data passed through the search pipeline. For example, <\/span>fields host, source, status<\/span> keeps those fields in the results. The command is useful when you want to control the available fields while continuing to process the results with later commands. This differs from <\/span>table<\/span>, which is primarily intended to format the final results into a tabular presentation. <\/span>chart<\/span> performs statistical aggregation, <\/span>transaction<\/span> groups related events, and <\/span>top<\/span> identifies frequently occurring values.<\/span><\/p>\n

      Question: 203. What is the primary purpose of the <\/b>lookup<\/b> command in Splunk?<\/b><\/p>\n

        \n
      1. <\/b> To permanently delete events from an index<\/span>
        \n<\/span>2.<\/b> To match search data with information stored in a lookup table<\/span>
        \n<\/span>3.<\/b> To create a new Splunk index<\/span>
        \n<\/span>4.<\/b> To restart a search head<\/span><\/li>\n<\/ol>\n

        Correct Answer:<\/b> 2. <\/span>To match search data with information stored in a lookup table<\/span><\/p>\n

        Explanation:<\/b><\/p>\n

        The <\/span>lookup<\/span> command enriches search results by matching field values against information stored in a lookup table. A lookup can contain reference information such as department names, product descriptions, geographic details, or other mappings that are useful for interpreting event data. When a matching value is found, additional fields from the lookup can be added to the search results. For example, an event might contain a department code while a lookup table contains the corresponding department name. The lookup allows the search to display the more meaningful name. This makes lookup tables useful for enriching existing event data without changing the original indexed events.<\/span><\/p>\n

        Question: 204. In a Splunk lookup command, what does the <\/b>OUTPUT<\/b> clause generally specify?<\/b><\/p>\n

          \n
        1. <\/b> The index where results should be stored<\/span>
          \n<\/span>2.<\/b> The fields used to start a search<\/span>
          \n<\/span>3.<\/b> The lookup fields whose values should be added to the results<\/span>
          \n<\/span>4.<\/b> The time range of the search<\/span><\/li>\n<\/ol>\n

          Correct Answer:<\/b> 3. <\/span>The lookup fields whose values should be added to the results<\/span><\/p>\n

          Explanation:<\/b><\/p>\n

          The <\/span>OUTPUT<\/span> clause in a lookup search specifies fields from the lookup table that should be returned and added to the search results when a match occurs. For example, if a lookup matches a product ID and contains a product name, the <\/span>OUTPUT product_name<\/span> portion can add the product name to matching events. This allows the lookup to enrich the existing results with additional information. The fields used for matching are separate from the fields being returned. The index and time range are controlled by other parts of the search, while <\/span>OUTPUT<\/span> focuses specifically on which lookup values should become fields in the resulting events.<\/span><\/p>\n

          Question: 205. Which command can be used to read records directly from a CSV lookup file in Splunk?<\/b><\/p>\n

            \n
          1. <\/b> inputlookup<\/span>
            \n<\/span>2.<\/b> eventstats<\/span>
            \n<\/span>3.<\/b> streamstats<\/span>
            \n<\/span>4.<\/b> fillnull<\/span><\/li>\n<\/ol>\n

            Correct Answer:<\/b> 1. <\/span>inputlookup<\/span><\/p>\n

            Explanation:<\/b><\/p>\n

            The <\/span>inputlookup<\/span> command is used to read data from a lookup table and return its records as search results. This is particularly useful when you want to inspect the contents of a CSV lookup or use lookup data as the starting point for further SPL processing. For example, an analyst can use <\/span>| inputlookup employees.csv<\/span> to retrieve records from a CSV lookup table. The command does not search indexed event data in the same way as a normal event search. Instead, it reads the lookup dataset and makes its records available to the search pipeline. This makes <\/span>inputlookup<\/span> useful for examining reference data and combining it with other searches.<\/span><\/p>\n

            Question: 206. Which command can save search results into a lookup table for later use?<\/b><\/p>\n

              \n
            1. <\/b> appendcols<\/span>
              \n<\/span>2.<\/b> outputlookup<\/span>
              \n<\/span>3.<\/b> coalesce<\/span>
              \n<\/span>4.<\/b> strftime<\/span><\/li>\n<\/ol>\n

              Correct Answer:<\/b> 2. <\/span>outputlookup<\/span><\/p>\n

              Explanation:<\/b><\/p>\n

              The <\/span>outputlookup<\/span> command writes the current search results to a lookup table. This can be useful when search results need to be stored as reference data that can later be accessed by another search. For example, an analyst may generate a list of important hosts or users and save that information into a lookup for subsequent enrichment or reporting. Depending on the configuration and command options, the lookup can be updated or replaced. <\/span>inputlookup<\/span> performs the opposite general operation by reading lookup data into a search. Commands such as <\/span>appendcols<\/span>, <\/span>coalesce<\/span>, and <\/span>strftime<\/span> perform completely different types of operations within an SPL pipeline.<\/span><\/p>\n

              Question: 207. Which function returns the number of values contained in a multivalue field?<\/b><\/p>\n

                \n
              1. <\/b> mvindex<\/span>
                \n<\/span>2.<\/b> mvcount<\/span>
                \n<\/span>3.<\/b> substr<\/span>
                \n<\/span>4.<\/b> len<\/span><\/li>\n<\/ol>\n

                Correct Answer:<\/b> 2. <\/span>mvcount<\/span><\/p>\n

                Explanation:<\/b><\/p>\n

                The <\/span>mvcount<\/span> function returns the number of values contained in a multivalue field. Multivalue fields can contain multiple values associated with a single event, such as several destination addresses, usernames, or categories. Using <\/span>mvcount(field)<\/span> allows a search to determine how many individual values are present. For example, if a multivalue field contains four values, <\/span>mvcount(field)<\/span> returns four. <\/span>mvindex<\/span> is instead used to retrieve a particular value or range of values from a multivalue field. The <\/span>len<\/span> function measures the length of a string, while <\/span>substr<\/span> extracts a portion of a string. Therefore, <\/span>mvcount<\/span> is the appropriate function for counting multivalue entries.<\/span><\/p>\n

                Question: 208. Which function can be used to retrieve a specific value from a multivalue field?<\/b><\/p>\n

                  \n
                1. <\/b> mvindex<\/span>
                  \n<\/span>2.<\/b> mvcount<\/span>
                  \n<\/span>3.<\/b> isnull<\/span>
                  \n<\/span>4.<\/b> lower<\/span><\/li>\n<\/ol>\n

                  Correct Answer:<\/b> 1. <\/span>mvindex<\/span><\/p>\n

                  Explanation:<\/b><\/p>\n

                  The <\/span>mvindex<\/span> function retrieves one or more values from a multivalue field based on their position. This is useful when an event contains multiple values and you need to work with a particular entry. For example, a search can use <\/span>mvindex(field, 0)<\/span> to retrieve the first value from a multivalue field. Depending on the expression, ranges can also be selected. This differs from <\/span>mvcount<\/span>, which returns the number of values rather than the value itself. Functions such as <\/span>isnull<\/span> test whether a field has a null value, while <\/span>lower<\/span> converts text to lowercase. Understanding multivalue functions is important when working with fields containing multiple associated values.<\/span><\/p>\n

                  Question: 209. Which Splunk function tests whether a field contains a null value?<\/b><\/p>\n

                    \n
                  1. <\/b> isnotnull<\/span>
                    \n<\/span>2.<\/b> coalesce<\/span>
                    \n<\/span>3.<\/b> isnull<\/span>
                    \n<\/span>4.<\/b> mvcount<\/span><\/li>\n<\/ol>\n

                    Correct Answer:<\/b> 3. <\/span>isnull<\/span><\/p>\n

                    Explanation:<\/b><\/p>\n

                    The <\/span>isnull<\/span> function tests whether a field has a null value. It returns a Boolean result that can be used in expressions, filtering, or conditional logic. For example, <\/span>eval missing=if(isnull(user), “Unknown”, user)<\/span> can assign a replacement value when the <\/span>user<\/span> field is null. This is useful when event data is incomplete and searches need to identify or handle missing information. <\/span>isnotnull<\/span> performs the opposite test by checking whether a value is not null. <\/span>coalesce<\/span> can select the first available non-null value from multiple fields, while <\/span>mvcount<\/span> counts values in a multivalue field. These functions therefore address different data-handling requirements.<\/span><\/p>\n

                    Question: 210. Which Splunk function is used to return the first non-null value from a list of fields?<\/b><\/p>\n

                      \n
                    1. <\/b> coalesce<\/span>
                      \n<\/span>2.<\/b> substr<\/span>
                      \n<\/span>3.<\/b> mvindex<\/span>
                      \n<\/span>4.<\/b> isnull<\/span><\/li>\n<\/ol>\n

                      Correct Answer:<\/b> 1. <\/span>coalesce<\/span><\/p>\n

                      Explanation:<\/b><\/p>\n

                      The <\/span>coalesce<\/span> function returns the first value in its argument list that is not null. It is especially useful when the same type of information may appear in different fields depending on the event source. For example, if a username may be stored in either <\/span>user<\/span>, <\/span>username<\/span>, or <\/span>account<\/span>, <\/span>coalesce(user, username, account)<\/span> can provide the first available value. This can simplify searches that process data from multiple sources with inconsistent field naming. Unlike <\/span>isnull<\/span>, which tests for null values, <\/span>coalesce<\/span> selects an available value. <\/span>substr<\/span> extracts characters from a string, while <\/span>mvindex<\/span> retrieves values from multivalue fields.<\/span><\/p>\n

                      Question: 211. Which conditional function allows different results to be returned based on multiple conditions?<\/b><\/p>\n

                        \n
                      1. <\/b> case<\/span>
                        \n<\/span>2.<\/b> lower<\/span>
                        \n<\/span>3.<\/b> len<\/span>
                        \n<\/span>4.<\/b> strftime<\/span><\/li>\n<\/ol>\n

                        Correct Answer:<\/b> 1. <\/span>case<\/span><\/p>\n

                        Explanation:<\/b><\/p>\n

                        The <\/span>case<\/span> function is useful when a field needs to be assigned different values depending on multiple conditions. It allows several condition-and-result pairs to be evaluated in sequence. For example, an analyst could classify numeric severity values into categories such as low, medium, and high by using several conditions in a <\/span>case<\/span> expression. This is particularly helpful when more than two possible outcomes are required. The <\/span>if<\/span> function is commonly used for a simpler two-outcome condition, whereas <\/span>case<\/span> is better suited to multiple conditions. Functions such as <\/span>lower<\/span>, <\/span>len<\/span>, and <\/span>strftime<\/span> perform text or time transformations rather than multi-condition classification.<\/span><\/p>\n

                        Question: 212. Which function converts an epoch timestamp into a human-readable time string?<\/b><\/p>\n

                          \n
                        1. <\/b> strptime<\/span>
                          \n<\/span>2.<\/b> strftime<\/span>
                          \n<\/span>3.<\/b> substr<\/span>
                          \n<\/span>4.<\/b> tonumber<\/span><\/li>\n<\/ol>\n

                          Correct Answer:<\/b> 2. <\/span>strftime<\/span><\/p>\n

                          Explanation:<\/b><\/p>\n

                          The <\/span>strftime<\/span> function formats an epoch timestamp into a human-readable string according to a specified time format. Epoch time represents a point in time as a numeric value, while <\/span>strftime<\/span> can convert that value into a readable representation such as a date and time. For example, an analyst can use <\/span>strftime(_time, “%Y-%m-%d %H:%M:%S”)<\/span> to display an event timestamp in a familiar format. <\/span>strptime<\/span> performs the reverse general operation: it parses a formatted time string and converts it into epoch time. Therefore, the two functions are related but serve opposite purposes. <\/span>substr<\/span> handles strings and does not perform timestamp formatting.<\/span><\/p>\n

                          Question: 213. Which function converts a formatted time string into epoch time?<\/b><\/p>\n

                            \n
                          1. <\/b> strftime<\/span>
                            \n<\/span>2.<\/b> timechart<\/span>
                            \n<\/span>3.<\/b> strptime<\/span>
                            \n<\/span>4.<\/b> bucket<\/span><\/li>\n<\/ol>\n

                            Correct Answer:<\/b> 3. <\/span>strptime<\/span><\/p>\n

                            Explanation:<\/b><\/p>\n

                            The <\/span>strptime<\/span> function converts a formatted time string into an epoch timestamp using a specified format. This is useful when time information exists in a field as text rather than as a numeric timestamp. For example, a date string such as <\/span>2026-09-19 10:30:00<\/span> can be parsed using an appropriate <\/span>strptime<\/span> format to produce an epoch value that Splunk can use for time-based operations. <\/span>strftime<\/span> works in the opposite direction by formatting an epoch timestamp as readable text. <\/span>timechart<\/span> creates time-based statistical results, while <\/span>bucket<\/span> can group values into ranges. Therefore, <\/span>strptime<\/span> is specifically associated with parsing formatted time strings.<\/span><\/p>\n

                            Question: 214. What is the primary purpose of the <\/b>bin<\/b> command in Splunk?<\/b><\/p>\n

                              \n
                            1. <\/b> To rename fields<\/span>
                              \n<\/span>2.<\/b> To divide numerical or time values into discrete ranges<\/span>
                              \n<\/span>3.<\/b> To remove duplicate events<\/span>
                              \n<\/span>4.<\/b> To extract regular-expression fields<\/span><\/li>\n<\/ol>\n

                              Correct Answer:<\/b> 2. <\/span>To divide numerical or time values into discrete ranges<\/span><\/p>\n

                              Explanation:<\/b><\/p>\n

                              The <\/span>bin<\/span> command groups numerical or time-based values into discrete ranges, often called bins. This is useful when an analyst wants to aggregate events into intervals rather than examine every individual timestamp or numeric value. For example, using <\/span>bin _time span=1h<\/span> can group events into one-hour time buckets. The command is particularly useful before statistical aggregation because it provides consistent ranges for grouping. <\/span>bin<\/span> is also associated with the <\/span>bucket<\/span> command, which provides similar bucketing functionality. It does not rename fields, remove duplicates, or perform regular-expression extraction. Those tasks are handled by commands such as <\/span>rename<\/span>, <\/span>dedup<\/span>, and <\/span>rex<\/span>.<\/span><\/p>\n

                              Question: 215. Which statement best describes the difference between <\/b>chart<\/b> and <\/b>stats<\/b> in Splunk?<\/b><\/p>\n

                                \n
                              1. <\/b> chart<\/span> only searches raw events, while <\/span>stats<\/span> only searches indexes<\/span>
                                \n<\/span>2.<\/b> stats<\/span> is used only for time-based data<\/span>
                                \n<\/span>3.<\/b> chart<\/span> produces a statistical table organized for two-dimensional reporting, while <\/span>stats<\/span> provides general statistical aggregation<\/span>
                                \n<\/span>4.<\/b> chart<\/span> permanently stores results, while <\/span>stats<\/span> deletes them<\/span><\/li>\n<\/ol>\n

                                Correct Answer:<\/b> 3. <\/span>chart<\/span> produces a statistical table organized for two-dimensional reporting, while <\/span>stats<\/span> provides general statistical aggregation`<\/span><\/p>\n

                                Explanation:<\/b><\/p>\n

                                Both <\/span>chart<\/span> and <\/span>stats<\/span> perform statistical aggregation, but they are designed for somewhat different result structures. The <\/span>stats<\/span> command is a general-purpose aggregation command that can calculate values such as counts, sums, averages, minimums, and maximums while grouping by fields. The <\/span>chart<\/span> command is designed to produce results in a structure suitable for two-dimensional reporting, commonly using a field for rows and another field for columns. This makes <\/span>chart<\/span> useful when the desired result resembles a cross-tabulation. Neither command permanently stores or deletes indexed events. They operate on search results and produce summarized output for analysis.<\/span><\/p>\n

                                Question: 216. Which feature allows a Splunk report to run automatically according to a defined schedule?<\/b><\/p>\n

                                  \n
                                1. <\/b> Scheduled execution<\/span>
                                  \n<\/span>2.<\/b> Raw event mode<\/span>
                                  \n<\/span>3.<\/b> Field aliasing<\/span>
                                  \n<\/span>4.<\/b> Source typing<\/span><\/li>\n<\/ol>\n

                                  Correct Answer:<\/b> 1. <\/span>Scheduled execution<\/span><\/p>\n

                                  Explanation:<\/b><\/p>\n

                                  A Splunk report can be configured to run automatically on a defined schedule. Scheduled execution allows a saved report or search to execute at specified intervals rather than requiring a user to run it manually each time. This is useful for recurring operational reporting, periodic analysis, and other workflows where results need to be generated regularly. Scheduling can also be associated with actions such as updating dashboard data or triggering other configured behaviors, depending on the Splunk setup. Field aliases and source typing address field and data identification, while raw event mode concerns how search results are displayed. Scheduling therefore addresses when a saved search or report runs.<\/span><\/p>\n

                                  Question: 217. In Splunk, what is a saved search?<\/b><\/p>\n

                                    \n
                                  1. <\/b> A deleted index that can be restored<\/span>
                                    \n<\/span>2.<\/b> A search query that has been saved for reuse<\/span>
                                    \n<\/span>3.<\/b> A lookup file containing only CSV records<\/span>
                                    \n<\/span>4.<\/b> A permanent copy of every matching event<\/span><\/li>\n<\/ol>\n

                                    Correct Answer:<\/b> 2. <\/span>A search query that has been saved for reuse<\/span><\/p>\n

                                    Explanation:<\/b><\/p>\n

                                    A saved search is a search query that has been stored in Splunk so it can be reused without manually recreating the SPL each time. Saved searches can be useful for frequently performed analysis and can serve as the basis for reports, alerts, or scheduled searches. Saving a search does not mean Splunk creates a permanent duplicate of every event returned by that search. The underlying indexed data remains managed according to the normal indexing and retention configuration. Saved searches are knowledge objects that preserve the search definition and associated settings. This makes them useful for standardizing recurring searches and making commonly used analysis easier to access.<\/span><\/p>\n

                                    Question: 218. Which option best describes the purpose of a Splunk alert?<\/b><\/p>\n

                                      \n
                                    1. <\/b> It permanently changes indexed events<\/span>
                                      \n<\/span>2.<\/b> It converts every event into a lookup<\/span>
                                      \n<\/span>3.<\/b> It automatically identifies specified search conditions and can trigger configured actions<\/span>
                                      \n<\/span>4.<\/b> It replaces the Splunk indexer<\/span><\/li>\n<\/ol>\n

                                      Correct Answer:<\/b> 3. <\/span>It automatically identifies specified search conditions and can trigger configured actions<\/span><\/p>\n

                                      Explanation:<\/b><\/p>\n

                                      A Splunk alert is designed to detect conditions identified by a search and trigger configured actions when those conditions are met. For example, an alert can be configured around a search that detects an unusual number of failed login attempts. Depending on the configuration, an alert can notify users or perform another supported action. Alerts are based on searches and conditions rather than changing or deleting the underlying indexed events. They are useful for monitoring situations that require attention without requiring an analyst to manually run the same search repeatedly. The exact triggering behavior depends on whether the alert is configured as a scheduled or real-time alert and on its conditions.<\/span><\/p>\n

                                      Question: 219. Which Splunk command combines the columns of two result sets based on their row positions rather than matching events by a common field?<\/b><\/p>\n

                                        \n
                                      1. <\/b> appendcols<\/span>
                                        \n<\/span>2.<\/b> join<\/span>
                                        \n<\/span>3.<\/b> append<\/span>
                                        \n<\/span>4.<\/b> transaction<\/span><\/li>\n<\/ol>\n

                                        Correct Answer:<\/b> 1. <\/span>appendcols<\/span><\/p>\n

                                        Explanation:<\/b><\/p>\n

                                        The <\/span>appendcols<\/span> command appends the fields from a subsearch to the current results based on the position of the rows in the two result sets. It is therefore different from <\/span>join<\/span>, which can combine results using matching fields, and different from <\/span>append<\/span>, which adds the rows of another search to the existing result set. Because <\/span>appendcols<\/span> associates columns by row position, the order and number of rows in the result sets are important. It should be used when the two result sets are intentionally aligned. <\/span>transaction<\/span> has another purpose: it groups related events into transactions based on specified relationships and constraints.<\/span><\/p>\n

                                        Question: 220. Which command adds the results of another search as additional rows to the current result set?<\/b><\/p>\n

                                          \n
                                        1. <\/b> appendcols<\/span>
                                          \n<\/span>2.<\/b> rename<\/span>
                                          \n<\/span>3.<\/b> append<\/span>
                                          \n<\/span>4.<\/b> eventstats<\/span><\/li>\n<\/ol>\n

                                          Correct Answer:<\/b> 3. <\/span>append<\/span><\/p>\n

                                          Explanation:<\/b><\/p>\n

                                          The <\/span>append<\/span> command adds the results returned by a subsearch to the current search results as additional rows. This differs from <\/span>appendcols<\/span>, which adds fields as additional columns to existing rows. For example, <\/span>append<\/span> can be useful when two searches produce similar types of results and the analyst wants to combine their rows into one result set. The two searches do not need to match on a common field in the same way that a <\/span>join<\/span> operation does. <\/span>rename<\/span> changes field names, while <\/span>eventstats<\/span> calculates statistics and adds those results back to individual events. Understanding the distinction between these commands helps prevent incorrect result structures.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Splunk SPLK-1001 Exam Dumps and Practice Test Dumps   Question: 201. In Splunk, which command is used to filter search results based on a specified condition? stats 2. table 3. rename 4. search Correct Answer: 4. search Explanation: The search command is used to filter events or search results based on specified criteria. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18426"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18426"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18426\/revisions"}],"predecessor-version":[{"id":18427,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18426\/revisions\/18427"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18426"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18426"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18426"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}