{"id":18438,"date":"2026-09-22T07:17:48","date_gmt":"2026-09-22T07:17:48","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18438"},"modified":"2026-09-22T07:17:48","modified_gmt":"2026-09-22T07:17:48","slug":"splunk-splk-1001-practice-test-questions-and-exam-dumps-part-17-q321-340","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/splunk-splk-1001-practice-test-questions-and-exam-dumps-part-17-q321-340\/","title":{"rendered":"Splunk SPLK-1001 Practice Test Questions and Exam Dumps Part 17 Q321-340"},"content":{"rendered":"

View Full<\/b> Splunk SPLK-1001 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/p>\n

 <\/p>\n

Question: 321. Which search condition returns events where either the <\/b>host<\/b> field is <\/b>web01<\/b> or the <\/b>host<\/b> field is <\/b>web02<\/b>?<\/b><\/p>\n

    \n
  1. <\/b> host=web01 AND host=web02<\/span>
    \n<\/span>2.<\/b> host=web01 OR host=web02<\/span>
    \n<\/span>3.<\/b> host=web01 NOT host=web02<\/span>
    \n<\/span>4.<\/b> host=(web01 web02)<\/span><\/li>\n<\/ol>\n

    Correct Answer:<\/b> 2. <\/span>host=web01 OR host=web02<\/span><\/p>\n

    Explanation:<\/b><\/p>\n

    The <\/span>OR<\/span> operator allows a Splunk search to match either of multiple conditions. In this example, <\/span>host=web01 OR host=web02<\/span> returns events associated with either specified host. This is useful when the same investigation needs to cover multiple systems without creating separate searches. The <\/span>AND<\/span> operator would require both conditions to be true, which is generally not possible for a single-valued host field in the same event. <\/span>NOT<\/span> would exclude a condition rather than provide an alternative. Using <\/span>OR<\/span> with field-value expressions is a fundamental way to broaden a search while still keeping the criteria specific.<\/span><\/p>\n

    Question: 322. Which Boolean operator is used to exclude matching events from a Splunk search?<\/b><\/p>\n

      \n
    1. <\/b> NOT<\/span>
      \n<\/span>2.<\/b> OR<\/span>
      \n<\/span>3.<\/b> AND<\/span>
      \n<\/span>4.<\/b> PLUS<\/span><\/li>\n<\/ol>\n

      Correct Answer:<\/b> 1. <\/span>NOT<\/span><\/p>\n

      Explanation:<\/b><\/p>\n

      The <\/span>NOT<\/span> Boolean operator is used to exclude events that match a specified search condition. For example, a search such as <\/span>error NOT debug<\/span> can be used to find events containing <\/span>error<\/span> while excluding events that also match the <\/span>debug<\/span> term. This is particularly useful when a broad search returns large numbers of results that are known to be irrelevant. <\/span>OR<\/span> expands a search by accepting either condition, while <\/span>AND<\/span> requires conditions to be satisfied together. <\/span>PLUS<\/span> is not a standard Splunk Boolean operator. Understanding exclusion logic helps analysts narrow searches without changing or deleting the underlying event data.<\/span><\/p>\n

      Question: 323. What does placing a search phrase inside quotation marks generally accomplish in Splunk?<\/b><\/p>\n

        \n
      1. <\/b> It permanently stores the phrase as a lookup value.<\/span>
        \n<\/span>2.<\/b> It converts the phrase into a numeric field.<\/span>
        \n<\/span>3.<\/b> It searches for the words as a phrase rather than treating them as unrelated terms.<\/span>
        \n<\/span>4.<\/b> It automatically extracts a new field from every event.<\/span><\/li>\n<\/ol>\n

        Correct Answer:<\/b> 3. <\/span>It searches for the words as a phrase rather than treating them as unrelated terms.<\/span><\/p>\n

        Explanation:<\/b><\/p>\n

        Quotation marks are useful when a search needs to match a phrase made up of multiple words. For example, searching for <\/span>“disk full”<\/span> expresses an interest in that phrase rather than simply searching independently for the terms <\/span>disk<\/span> and <\/span>full<\/span>. Phrase searching can make a search more precise when individual words may appear in many unrelated contexts. It is especially useful for log messages, error descriptions, and other textual content where the order and combination of words matter. Quotation marks do not create fields, perform numerical conversions, or save data. They primarily help control how text terms are interpreted during search.<\/span><\/p>\n

        Question: 324. Which SPL expression creates a new field named <\/b>total<\/b> by adding the values of <\/b>bytes_in<\/b> and <\/b>bytes_out<\/b>?<\/b><\/p>\n

          \n
        1. <\/b> eval total=bytes_in+bytes_out<\/span>
          \n<\/span>2.<\/b> stats total=bytes_in+bytes_out<\/span>
          \n<\/span>3.<\/b> table total=bytes_in+bytes_out<\/span>
          \n<\/span>4.<\/b> rename bytes_in+bytes_out AS total<\/span><\/li>\n<\/ol>\n

          Correct Answer:<\/b> 1. <\/span>eval total=bytes_in+bytes_out<\/span><\/p>\n

          Explanation:<\/b><\/p>\n

          The <\/span>eval<\/span> command is used to calculate expressions and create or modify fields. Therefore, <\/span>eval total=bytes_in+bytes_out<\/span> creates a field called <\/span>total<\/span> containing the sum of the two existing fields. This is a common SPL technique for deriving useful values from event data. The <\/span>stats<\/span> command is designed for statistical aggregation rather than direct field assignment in this form. <\/span>table<\/span> controls which fields are displayed, while <\/span>rename<\/span> changes field names rather than performing arithmetic. Using <\/span>eval<\/span> effectively is essential for creating calculated fields, applying conditional logic, converting values, and preparing data for later statistical commands.<\/span><\/p>\n

          Question: 325. Which <\/b>eval<\/b> function can return one value when a condition is true and another value when it is false?<\/b><\/p>\n

            \n
          1. <\/b> len()<\/span>
            \n<\/span>2.<\/b> if()<\/span>
            \n<\/span>3.<\/b> lower()<\/span>
            \n<\/span>4.<\/b> substr()<\/span><\/li>\n<\/ol>\n

            Correct Answer:<\/b> 2. <\/span>if()<\/span><\/p>\n

            Explanation:<\/b><\/p>\n

            The <\/span>if()<\/span> function evaluates a condition and returns one result when the condition is true and another result when it is false. A common pattern is <\/span>eval severity=if(status>=500,”high”,”normal”)<\/span>, which creates a field based on a comparison. This makes <\/span>if()<\/span> useful for categorizing events, creating flags, and deriving simple conditional values. The <\/span>len()<\/span> function measures string length, <\/span>lower()<\/span> converts text to lowercase, and <\/span>substr()<\/span> extracts part of a string. Conditional functions are important in SPL because they allow search results to be transformed into meaningful categories without changing the original indexed events.<\/span><\/p>\n

            Question: 326. Which function can test whether a field contains a null value?<\/b><\/p>\n

              \n
            1. <\/b> isnull()<\/span>
              \n<\/span>2.<\/b> mvcount()<\/span>
              \n<\/span>3.<\/b> tostring()<\/span>
              \n<\/span>4.<\/b> tonumber()<\/span><\/li>\n<\/ol>\n

              Correct Answer:<\/b> 1. <\/span>isnull()<\/span><\/p>\n

              Explanation:<\/b><\/p>\n

              The <\/span>isnull()<\/span> function tests whether a specified value is null. It is commonly used with <\/span>eval<\/span> or conditional expressions when searches need to distinguish missing values from populated fields. For example, an analyst might use <\/span>eval missing=if(isnull(user),1,0)<\/span> to create an indicator showing whether the <\/span>user<\/span> field is missing. <\/span>mvcount()<\/span> is designed to count values in a multivalue field, while <\/span>tostring()<\/span> and <\/span>tonumber()<\/span> perform type conversions. Correctly identifying null values is important when analyzing incomplete log data because a missing field is different from a field containing an empty or ordinary value.<\/span><\/p>\n

              Question: 327. Which command is commonly used to remove unwanted fields from the search results while keeping other fields available?<\/b><\/p>\n

                \n
              1. <\/b> fields – fieldname<\/span>
                \n<\/span>2.<\/b> rename fieldname<\/span>
                \n<\/span>3.<\/b> remove fieldname<\/span>
                \n<\/span>4.<\/b> delete fieldname<\/span><\/li>\n<\/ol>\n

                Correct Answer:<\/b> 1. <\/span>fields – fieldname<\/span><\/p>\n

                Explanation:<\/b><\/p>\n

                The <\/span>fields<\/span> command can be used with a minus sign to exclude specified fields from the results. For example, <\/span>fields – _raw<\/span> removes the <\/span>_raw<\/span> field from the displayed result set while retaining other fields. This is useful for simplifying output, reducing unnecessary information, and making tables easier to read. The command does not delete the underlying indexed data; it only controls which fields remain available in the search results at that point in the pipeline. <\/span>rename<\/span> changes field names, while <\/span>remove<\/span> and <\/span>delete<\/span> are not the standard SPL syntax for this purpose. Field selection is an important part of producing clean search results.<\/span><\/p>\n

                Question: 328. Which command is most appropriate for displaying only the fields explicitly specified by the analyst?<\/b><\/p>\n

                  \n
                1. <\/b> fields<\/span>
                  \n<\/span>2.<\/b> where<\/span>
                  \n<\/span>3.<\/b> eval<\/span>
                  \n<\/span>4.<\/b> sort<\/span><\/li>\n<\/ol>\n

                  Correct Answer:<\/b> 1. <\/span>fields<\/span><\/p>\n

                  Explanation:<\/b><\/p>\n

                  The <\/span>fields<\/span> command controls which fields are retained in the search results. When field names are explicitly provided, it can restrict the result set to those fields, helping reduce unnecessary output. This is useful when a search produces many fields but the analyst only needs a small subset for further processing or presentation. <\/span>where<\/span> filters events based on expressions, <\/span>eval<\/span> creates or modifies fields, and <\/span>sort<\/span> changes the ordering of results. The <\/span>fields<\/span> command therefore focuses on field selection rather than event filtering or calculation. It is especially helpful for making large search results easier to inspect and process.<\/span><\/p>\n

                  Question: 329. What does the <\/b>head<\/b> command do when used without additional options?<\/b><\/p>\n

                    \n
                  1. <\/b> It returns the first results in the current result set.<\/span>
                    \n<\/span>2.<\/b> It returns the last results in the current result set.<\/span>
                    \n<\/span>3.<\/b> It calculates the average of every numeric field.<\/span>
                    \n<\/span>4.<\/b> It removes duplicate events.<\/span><\/li>\n<\/ol>\n

                    Correct Answer:<\/b> 1. <\/span>It returns the first results in the current result set.<\/span><\/p>\n

                    Explanation:<\/b><\/p>\n

                    The <\/span>head<\/span> command limits the search results to the first set of events or rows in the current result stream. This is useful when an analyst needs to inspect only a small sample rather than working with the entire result set. The exact meaning of \u201cfirst\u201d depends on the ordering of the results at that point in the pipeline, so <\/span>sort<\/span> can be used before <\/span>head<\/span> when a specific ranking is desired. <\/span>tail<\/span> works with the end of the result set, while <\/span>stats<\/span> performs aggregation and <\/span>dedup<\/span> removes duplicate values or events according to its specified fields. Understanding result order is important when using <\/span>head<\/span>.<\/span><\/p>\n

                    Question: 330. Which command returns the final results from the current result set rather than the beginning?<\/b><\/p>\n

                      \n
                    1. <\/b> top<\/span>
                      \n<\/span>2.<\/b> tail<\/span>
                      \n<\/span>3.<\/b> head<\/span>
                      \n<\/span>4.<\/b> reverse<\/span><\/li>\n<\/ol>\n

                      Correct Answer:<\/b> 2. <\/span>tail<\/span><\/p>\n

                      Explanation:<\/b><\/p>\n

                      The <\/span>tail<\/span> command returns the last results from the current result set. It is useful when the analyst is interested in the end of an ordered result stream rather than the beginning. As with <\/span>head<\/span>, the meaning of \u201clast\u201d depends on how the results are currently ordered. If a specific ordering is required, a sorting command can be used before applying <\/span>tail<\/span>. <\/span>head<\/span> returns the first results, while <\/span>top<\/span> is a statistical reporting command that identifies frequently occurring values. <\/span>reverse<\/span> changes result order rather than directly serving as the equivalent of <\/span>tail<\/span>. These commands are useful for controlling which portions of a result set are inspected.<\/span><\/p>\n

                      Question: 331. Which command removes duplicate results based on one or more specified fields?<\/b><\/p>\n

                        \n
                      1. <\/b> dedup<\/span>
                        \n<\/span>2.<\/b> unique<\/span>
                        \n<\/span>3.<\/b> distinct<\/span>
                        \n<\/span>4.<\/b> remove_duplicates<\/span><\/li>\n<\/ol>\n

                        Correct Answer:<\/b> 1. <\/span>dedup<\/span><\/p>\n

                        Explanation:<\/b><\/p>\n

                        The <\/span>dedup<\/span> command removes duplicate events or results based on the fields specified in the command. For example, <\/span>dedup user<\/span> keeps one result for each unique user value according to the command’s processing behavior. This is useful when an analyst needs a representative list of unique values rather than every repeated event. <\/span>dedup<\/span> does not modify the underlying indexed data; it only changes the results produced by the search. The other choices are not standard SPL command names for this operation. Because the retained result can depend on the current event ordering, analysts should consider sorting the data first when a particular record should be preserved.<\/span><\/p>\n

                        Question: 332. Which command can display the most frequently occurring values of a field?<\/b><\/p>\n

                          \n
                        1. <\/b> rare<\/span>
                          \n<\/span>2.<\/b> top<\/span>
                          \n<\/span>3.<\/b> head<\/span>
                          \n<\/span>4.<\/b> values<\/span><\/li>\n<\/ol>\n

                          Correct Answer:<\/b> 2. <\/span>top<\/span><\/p>\n

                          Explanation:<\/b><\/p>\n

                          The <\/span>top<\/span> command identifies the most frequently occurring values of one or more fields and provides useful statistics about their frequency. It is commonly used when analysts want to quickly determine which categories, users, hosts, or other field values appear most often. The <\/span>rare<\/span> command focuses on less frequently occurring values, while <\/span>head<\/span> simply limits the number of results and does not calculate frequency. The <\/span>values<\/span> function is used in statistical expressions to return distinct values rather than specifically ranking them by occurrence. <\/span>top<\/span> is therefore useful for quickly identifying dominant patterns in event data without manually calculating and sorting counts.<\/span><\/p>\n

                          Question: 333. Which command is designed to identify values that occur relatively infrequently in the search results?<\/b><\/p>\n

                            \n
                          1. <\/b> top<\/span>
                            \n<\/span>2.<\/b> stats<\/span>
                            \n<\/span>3.<\/b> rare<\/span>
                            \n<\/span>4.<\/b> head<\/span><\/li>\n<\/ol>\n

                            Correct Answer:<\/b> 3. <\/span>rare<\/span><\/p>\n

                            Explanation:<\/b><\/p>\n

                            The <\/span>rare<\/span> command is used to identify values that occur infrequently in the search results. This can be useful for detecting unusual categories, uncommon hosts, rare error types, or other values that may deserve investigation. It is conceptually related to <\/span>top<\/span>, but <\/span>top<\/span> focuses on the most common values while <\/span>rare<\/span> focuses on the least common values. <\/span>stats<\/span> performs broader statistical calculations and does not inherently identify rare values, while <\/span>head<\/span> simply limits results. Rare-value analysis can be useful in investigations because unusual events may represent configuration problems, exceptional conditions, or activity that differs from the normal pattern.<\/span><\/p>\n

                            Question: 334. Which command can add the values of multiple numeric fields together for each event or result?<\/b><\/p>\n

                              \n
                            1. <\/b> addtotals<\/span>
                              \n<\/span>2.<\/b> addvalues<\/span>
                              \n<\/span>3.<\/b> sumfields<\/span>
                              \n<\/span>4.<\/b> totalize<\/span><\/li>\n<\/ol>\n

                              Correct Answer:<\/b> 1. <\/span>addtotals<\/span><\/p>\n

                              Explanation:<\/b><\/p>\n

                              The <\/span>addtotals<\/span> command is designed to calculate totals across numeric fields and add the resulting total to the search results. It can be useful when a result contains several related numeric measures and the analyst wants a combined total. For example, values representing different categories of traffic can be combined into a total for each result. The command works with the existing result fields and does not modify the original indexed events. The other names shown are not standard SPL commands for this purpose. Adding totals can simplify reporting because analysts can calculate combined values without manually writing separate arithmetic expressions for every field.<\/span><\/p>\n

                              Question: 335. Which command can add a total row or column total to statistical results?<\/b><\/p>\n

                                \n
                              1. <\/b> addtotals<\/span>
                                \n<\/span>2.<\/b> addcoltotals<\/span>
                                \n<\/span>3.<\/b> totalrows<\/span>
                                \n<\/span>4.<\/b> sumtable<\/span><\/li>\n<\/ol>\n

                                Correct Answer:<\/b> 2. <\/span>addcoltotals<\/span><\/p>\n

                                Explanation:<\/b><\/p>\n

                                The <\/span>addcoltotals<\/span> command can be used to add column totals to tabular statistical results. This is particularly useful when a search has produced a table containing numerical values across categories and the analyst wants an overall total included in the output. It complements other result-formatting and aggregation techniques by making summary tables easier to interpret. <\/span>addtotals<\/span> can calculate totals across fields or rows depending on its use, while the other choices shown are not standard SPL commands. Adding totals is primarily a reporting convenience and does not alter the original indexed events. It can help users quickly compare individual category values with their overall combined amount.<\/span><\/p>\n

                                Question: 336. Which command can provide a summary of fields and their characteristics for the current search results?<\/b><\/p>\n

                                  \n
                                1. <\/b> fieldsummary<\/span>
                                  \n<\/span>2.<\/b> fieldsinfo<\/span>
                                  \n<\/span>3.<\/b> fieldstats<\/span>
                                  \n<\/span>4.<\/b> summaryfields<\/span><\/li>\n<\/ol>\n

                                  Correct Answer:<\/b> 1. <\/span>fieldsummary<\/span><\/p>\n

                                  Explanation:<\/b><\/p>\n

                                  The <\/span>fieldsummary<\/span> command provides information about fields in the current search results, including useful characteristics such as field presence and value-related statistics. It can help analysts understand the structure of returned data before deciding how to process it further. This is particularly useful when working with unfamiliar datasets because it can reveal which fields are populated and provide a quick overview of their contents. The command does not change the underlying events or create a permanent schema. The other names listed are not standard SPL command names for this purpose. Field inspection tools can make exploratory analysis faster by helping users understand the available data.<\/span><\/p>\n

                                  Question: 337. Which SPL function can convert text to lowercase?<\/b><\/p>\n

                                    \n
                                  1. <\/b> upper()<\/span>
                                    \n<\/span>2.<\/b> lower()<\/span>
                                    \n<\/span>3.<\/b> tolowercase()<\/span>
                                    \n<\/span>4.<\/b> casefold()<\/span><\/li>\n<\/ol>\n

                                    Correct Answer:<\/b> 2. <\/span>lower()<\/span><\/p>\n

                                    Explanation:<\/b><\/p>\n

                                    The <\/span>lower()<\/span> function converts alphabetic characters in a string to lowercase. This is useful when values need to be normalized before comparison or categorization. For example, user-entered values such as <\/span>Admin<\/span>, <\/span>ADMIN<\/span>, and <\/span>admin<\/span> can be converted to a consistent lowercase representation before being compared. This can reduce inconsistencies caused by capitalization differences. <\/span>upper()<\/span> performs the opposite transformation, while the other alternatives are not standard SPL function names for this operation. Text normalization is particularly useful when combining data from different sources because different systems or applications may represent the same logical value with different capitalization.<\/span><\/p>\n

                                    Question: 338. Which SPL function can extract part of a string beginning at a specified position?<\/b><\/p>\n

                                      \n
                                    1. <\/b> len()<\/span>
                                      \n<\/span>2.<\/b> substr()<\/span>
                                      \n<\/span>3.<\/b> lower()<\/span>
                                      \n<\/span>4.<\/b> replaceall()<\/span><\/li>\n<\/ol>\n

                                      Correct Answer:<\/b> 2. <\/span>substr()<\/span><\/p>\n

                                      Explanation:<\/b><\/p>\n

                                      The <\/span>substr()<\/span> function is used to extract a portion of a string based on a starting position and, when specified, a length. This is useful when a field contains structured text and only a particular section is needed for analysis. For example, a fixed-format identifier may contain a prefix, code, and sequence number that can be separated using string functions. <\/span>len()<\/span> returns the length of a string rather than extracting characters, while <\/span>lower()<\/span> changes capitalization. The listed <\/span>replaceall()<\/span> option is not the standard function for extracting a substring. String manipulation functions are valuable for preparing fields for filtering, grouping, or reporting.<\/span><\/p>\n

                                      Question: 339. Which search-time concept describes extracting a field from the raw event data rather than storing a newly extracted copy of the field in the index?<\/b><\/p>\n

                                        \n
                                      1. <\/b> Search-time field extraction<\/span>
                                        \n<\/span>2.<\/b> Index deletion<\/span>
                                        \n<\/span>3.<\/b> Event destruction<\/span>
                                        \n<\/span>4.<\/b> Index-time rewriting<\/span><\/li>\n<\/ol>\n

                                        Correct Answer:<\/b> 1. <\/span>Search-time field extraction<\/span><\/p>\n

                                        Explanation:<\/b><\/p>\n

                                        Search-time field extraction refers to identifying and creating fields from event data when a search is executed. The extracted field can then be used for filtering, calculations, statistics, and reporting without requiring the original event to be rewritten. This is an important Splunk concept because many useful fields can be interpreted from raw event content at search time. It also means that changing an extraction configuration can affect how existing events are interpreted in future searches without necessarily requiring those events to be indexed again. Search-time extraction is therefore distinct from permanently rewriting or deleting indexed event data.<\/span><\/p>\n

                                        Question: 340. Which metadata field identifies the original data source from which a Splunk event was collected?<\/b><\/p>\n

                                          \n
                                        1. <\/b> host<\/span>
                                          \n<\/span>2.<\/b> index<\/span>
                                          \n<\/span>3.<\/b> source<\/span>
                                          \n<\/span>4.<\/b> _time<\/span><\/li>\n<\/ol>\n

                                          Correct Answer:<\/b> 3. <\/span>source<\/span><\/p>\n

                                          Explanation:<\/b><\/p>\n

                                          The <\/span>source<\/span> field identifies the source of the data from which a Splunk event originated. Depending on the input, this can represent information such as a file path, network input, or another source identifier. It is useful when analysts need to distinguish events coming from different input sources even when they may belong to the same host or index. The <\/span>host<\/span> field identifies the originating host, <\/span>index<\/span> identifies where the event is stored, and <\/span>_time<\/span> represents the event timestamp. Understanding these metadata fields helps analysts construct targeted searches and investigate where particular events entered the Splunk environment.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Splunk SPLK-1001 Exam Dumps and Practice Test Dumps   Question: 321. Which search condition returns events where either the host field is web01 or the host field is web02? host=web01 AND host=web02 2. host=web01 OR host=web02 3. host=web01 NOT host=web02 4. host=(web01 web02) Correct Answer: 2. host=web01 OR host=web02 Explanation: The OR operator […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18438"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18438"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18438\/revisions"}],"predecessor-version":[{"id":18439,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18438\/revisions\/18439"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}