{"id":21689,"date":"2026-09-25T06:52:28","date_gmt":"2026-09-25T06:52:28","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=21689"},"modified":"2026-09-25T06:52:28","modified_gmt":"2026-09-25T06:52:28","slug":"splunk-splk-5002-practice-test-questions-and-exam-dumps-part-15-q281-300","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/splunk-splk-5002-practice-test-questions-and-exam-dumps-part-15-q281-300\/","title":{"rendered":"Splunk SPLK-5002 Practice Test Questions and Exam Dumps Part 15 Q281-300"},"content":{"rendered":"

View Full <\/b>Splunk SPLK-5002 Exam Dumps<\/b><\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 281. An analyst wants to run a search that returns only the <\/b>user<\/b> field from the results of a subsearch. Which SPL construct is most appropriate for returning a field value from a subsearch?<\/b><\/p>\n

    \n
  1. <\/b> append<\/span><\/li>\n
  2. <\/b> return<\/span><\/li>\n
  3. <\/b> format<\/span><\/li>\n
  4. <\/b> appendcols<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2. <\/b>return<\/b><\/p>\n

    Explanation :-<\/b><\/p>\n

    The <\/span>return<\/span> command is designed to return values from a subsearch to the outer search. It can be used when a subsearch needs to pass one or more field values back to the main search, commonly as part of dynamically constructing search criteria. <\/span>append<\/span> and <\/span>appendcols<\/span> combine results rather than directly returning selected values for use by the parent search. The <\/span>format<\/span> command converts search results into a Boolean expression suitable for use by the outer search, but it does not provide the same direct field-value return behavior. Understanding <\/span>return<\/span> is useful when building efficient searches that use subsearch results as dynamic conditions.<\/span><\/p>\n

    Question 282. A search uses a subsearch to generate a list of values that should become search conditions for the outer search. Which command formats the subsearch results into a Boolean expression?<\/b><\/p>\n

      \n
    1. <\/b> format<\/span><\/li>\n
    2. <\/b> return<\/span><\/li>\n
    3. <\/b> transpose<\/span><\/li>\n
    4. <\/b> untable<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. <\/b>format<\/b><\/p>\n

      Explanation :-<\/b><\/p>\n

      The <\/span>format<\/span> command converts the tabular results produced by a subsearch into a search expression that can be interpreted by the outer search. This is particularly useful when a subsearch returns multiple rows that need to become a series of OR or AND conditions. For example, a subsearch returning several host values can be formatted into a Boolean expression for the main search. <\/span>return<\/span> instead returns selected field values from a subsearch, while <\/span>transpose<\/span> changes rows and columns and <\/span>untable<\/span> converts a table into events. Knowing how <\/span>format<\/span> works helps when constructing searches that depend dynamically on subsearch results.<\/span><\/p>\n

      Question 283. An administrator wants to execute an additional pipeline against the results of an existing search without creating a completely separate search. Which command should be used?<\/b><\/p>\n

        \n
      1. <\/b> appendpipe<\/span><\/li>\n
      2. <\/b> join<\/span><\/li>\n
      3. <\/b> appendcols<\/span><\/li>\n
      4. <\/b> transaction<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1. <\/b>appendpipe<\/b><\/p>\n

        Explanation :-<\/b><\/p>\n

        The <\/span>appendpipe<\/span> command runs a secondary pipeline against the results generated by the current search and appends those additional results to the existing results. This differs from <\/span>append<\/span>, which runs another independent search and appends its results. <\/span>appendcols<\/span> combines columns from another search with the current results based primarily on row position, while <\/span>join<\/span> combines results using common fields. <\/span>appendpipe<\/span> is useful when an analyst wants to derive an additional summary, calculation, or transformed representation from the current result set without repeating the original search logic.<\/span><\/p>\n

        Question 284. A dashboard search produces a table containing one row per host and several metric columns. The analyst wants to turn the column values into rows so that each host can be represented as a series of field-value pairs. Which command is appropriate?<\/b><\/p>\n

          \n
        1. <\/b> transpose<\/span><\/li>\n
        2. <\/b> untable<\/span><\/li>\n
        3. <\/b> reverse<\/span><\/li>\n
        4. <\/b> xyseries<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2. <\/b>untable<\/b><\/p>\n

          Explanation :-<\/b><\/p>\n

          The <\/span>untable<\/span> command converts a tabular dataset from a wide format into a series of events containing field-value relationships. This is useful when a table contains multiple metric columns and the analyst needs to transform those columns into rows. <\/span>transpose<\/span> performs a different structural transformation by transposing rows and columns. <\/span>reverse<\/span> reverses the order of results, while <\/span>xyseries<\/span> transforms results into a format suitable for charting with X and Y dimensions. Choosing <\/span>untable<\/span> is appropriate when the goal is to normalize a table into field-value pairs for subsequent SPL processing.<\/span><\/p>\n

          Question 285. An analyst needs to rotate the rows and columns of a result table to make the fields easier to compare vertically. Which SPL command performs this transformation?<\/b><\/p>\n

            \n
          1. <\/b> untable<\/span><\/li>\n
          2. <\/b> xyseries<\/span><\/li>\n
          3. <\/b> transpose<\/span><\/li>\n
          4. <\/b> reverse<\/span><\/li>\n<\/ol>\n

            Correct Answer: 3. <\/b>transpose<\/b><\/p>\n

            Explanation :-<\/b><\/p>\n

            The <\/span>transpose<\/span> command changes the orientation of a result table by turning rows into columns and columns into rows. It is useful when the original table is easier to interpret after its dimensions are rotated, especially for small result sets used in reports or exploratory analysis. <\/span>untable<\/span> converts tabular data into events rather than simply rotating the table. <\/span>xyseries<\/span> creates a table from X and Y values, often for charting purposes. <\/span>reverse<\/span> only changes the ordering of results. Therefore, <\/span>transpose<\/span> is the appropriate command when the requirement is specifically to rotate the structure of an existing result table.<\/span><\/p>\n

            Question 286. A search returns events in chronological order, but an analyst wants the most recent event to appear first without changing any field values. Which command should be used?<\/b><\/p>\n

              \n
            1. <\/b> tail<\/span><\/li>\n
            2. <\/b> reverse<\/span><\/li>\n
            3. <\/b> sort<\/span><\/li>\n
            4. <\/b> dedup<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2. <\/b>reverse<\/b><\/p>\n

              Explanation :-<\/b><\/p>\n

              The <\/span>reverse<\/span> command reverses the order of the search results without modifying the actual field values. If the current results are ordered from oldest to newest, <\/span>reverse<\/span> changes that order so the newest result appears first. <\/span>sort<\/span> can also order results based on a specified field, but it is used when explicit sorting criteria are required. <\/span>tail<\/span> returns only the final events in the result set, and <\/span>dedup<\/span> removes duplicate events based on specified fields. When an analyst simply needs to invert the existing result order, <\/span>reverse<\/span> provides the direct solution.<\/span><\/p>\n

              Question 287. A security analyst wants to calculate the difference between the current event’s numeric value and the value from the previous event. Which SPL command is designed for this type of comparison?<\/b><\/p>\n

                \n
              1. <\/b> accum<\/span><\/li>\n
              2. <\/b> delta<\/span><\/li>\n
              3. <\/b> trendline<\/span><\/li>\n
              4. <\/b> autoregress<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2. <\/b>delta<\/b><\/p>\n

                Explanation :-<\/b><\/p>\n

                The <\/span>delta<\/span> command calculates the difference between a field’s value in the current result and its value in a previous result. This is useful for identifying changes between consecutive events, such as changes in counters, measurements, or transaction values. <\/span>accum<\/span> creates a cumulative total, while <\/span>autoregress<\/span> adds values from previous events as fields that can be referenced later. <\/span>trendline<\/span> calculates moving statistical measures that help identify trends. When the requirement specifically involves calculating the difference between consecutive values, <\/span>delta<\/span> is the appropriate SPL command.<\/span><\/p>\n

                Question 288. A monitoring search needs to calculate a cumulative total of a numeric field as events are processed in result order. Which command provides this functionality?<\/b><\/p>\n

                  \n
                1. <\/b> delta<\/span><\/li>\n
                2. <\/b> autoregress<\/span><\/li>\n
                3. <\/b> accum<\/span><\/li>\n
                4. <\/b> reverse<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3. <\/b>accum<\/b><\/p>\n

                  Explanation :-<\/b><\/p>\n

                  The <\/span>accum<\/span> command calculates a cumulative sum of a numeric field across the search results. Each result contributes to the running total, making the command useful for analyzing counters, cumulative quantities, and progressive measurements. <\/span>delta<\/span> instead calculates the difference between consecutive values, while <\/span>autoregress<\/span> makes previous result values available for additional calculations. <\/span>reverse<\/span> only changes result ordering. Because the requirement is to maintain a running total as each result is processed, <\/span>accum<\/span> directly addresses the use case. Analysts should also ensure that the result ordering is appropriate before calculating a cumulative value.<\/span><\/p>\n

                  Question 289. An analyst wants to create a field containing the value of a specified field from the previous event so it can be compared with the current event. Which command is appropriate?<\/b><\/p>\n

                    \n
                  1. <\/b> autoregress<\/span><\/li>\n
                  2. <\/b> delta<\/span><\/li>\n
                  3. <\/b> accum<\/span><\/li>\n
                  4. <\/b> streamstats<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1. <\/b>autoregress<\/b><\/p>\n

                    Explanation :-<\/b><\/p>\n

                    The <\/span>autoregress<\/span> command creates fields containing values from previous events, allowing analysts to compare current values with earlier results. This is useful for sequential analysis, such as identifying changes in response time, counters, or other measurements. <\/span>delta<\/span> directly calculates a difference between consecutive values, while <\/span>accum<\/span> produces a cumulative sum. <\/span>streamstats<\/span> performs streaming statistical calculations and can also maintain running statistics, but it is not specifically designed as a direct previous-value field generator. When the goal is to retain a prior event’s field value for explicit comparison, <\/span>autoregress<\/span> is the appropriate command.<\/span><\/p>\n

                    Question 290. An analyst wants to calculate moving averages over a sequence of numeric results to identify changes in a metric over time. Which SPL command is designed for moving statistical calculations?<\/b><\/p>\n

                      \n
                    1. <\/b> trendline<\/span><\/li>\n
                    2. <\/b> delta<\/span><\/li>\n
                    3. <\/b> accum<\/span><\/li>\n
                    4. <\/b> replace<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1. <\/b>trendline<\/b><\/p>\n

                      Explanation :-<\/b><\/p>\n

                      The <\/span>trendline<\/span> command calculates moving statistical measures across a sequence of results. It can be used to calculate moving averages and other supported trend calculations, making it useful for identifying changes or patterns in metrics over time. <\/span>delta<\/span> focuses on differences between consecutive values, while <\/span>accum<\/span> creates cumulative totals. <\/span>replace<\/span> performs value substitutions rather than statistical analysis. Before using <\/span>trendline<\/span>, the analyst should ensure that the events are ordered appropriately because moving calculations depend on result sequence. This command is particularly useful when a search needs to smooth short-term fluctuations and make broader trends easier to identify.<\/span><\/p>\n

                      Question 291. A search needs to convert an epoch timestamp into a human-readable date and time string. Which SPL function is appropriate?<\/b><\/p>\n

                        \n
                      1. <\/b> strptime()<\/span><\/li>\n
                      2. <\/b> strftime()<\/span><\/li>\n
                      3. <\/b> relative_time()<\/span><\/li>\n
                      4. <\/b> now()<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. <\/b>strftime()<\/b><\/p>\n

                        Explanation :-<\/b><\/p>\n

                        The <\/span>strftime()<\/span> function converts an epoch time value into a formatted date and time string. For example, it can transform a numeric timestamp into a representation containing the year, month, day, hour, minute, and second. <\/span>strptime()<\/span> performs the opposite type of conversion by parsing a formatted date-time string into epoch time. <\/span>relative_time()<\/span> calculates a time relative to a specified timestamp, and <\/span>now()<\/span> returns the current epoch time. Understanding the distinction between <\/span>strftime()<\/span> and <\/span>strptime()<\/span> is important when converting time values between numeric epoch representations and readable strings.<\/span><\/p>\n

                        Question 292. An analyst receives a timestamp such as <\/b>2026-09-24 14:30:00<\/b> and needs to convert it into epoch time for calculations. Which SPL function should be used?<\/b><\/p>\n

                          \n
                        1. <\/b> strftime()<\/span><\/li>\n
                        2. <\/b> time()<\/span><\/li>\n
                        3. <\/b> strptime()<\/span><\/li>\n
                        4. <\/b> relative_time()<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3. <\/b>strptime()<\/b><\/p>\n

                          Explanation :-<\/b><\/p>\n

                          The <\/span>strptime()<\/span> function parses a date-time string according to a specified format and converts it into epoch time. This is useful when timestamps arrive as strings but need to participate in time arithmetic or comparisons. <\/span>strftime()<\/span> performs the reverse operation by formatting epoch time into a readable string. <\/span>relative_time()<\/span> calculates an adjusted timestamp relative to another time value, while <\/span>time()<\/span> is not the appropriate function for parsing a formatted timestamp string. The format string supplied to <\/span>strptime()<\/span> must correspond to the structure of the input timestamp for the conversion to work correctly.<\/span><\/p>\n

                          Question 293. A search needs to calculate a timestamp representing two hours before the value stored in <\/b>_time<\/b>. Which SPL function is appropriate?<\/b><\/p>\n

                            \n
                          1. <\/b> relative_time()<\/span><\/li>\n
                          2. <\/b> now()<\/span><\/li>\n
                          3. <\/b> strftime()<\/span><\/li>\n
                          4. <\/b> strptime()<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. <\/b>relative_time()<\/b><\/p>\n

                            Explanation :-<\/b><\/p>\n

                            The <\/span>relative_time()<\/span> function calculates a time value relative to a specified timestamp. It can apply offsets such as hours, days, or other supported time modifiers. For example, an expression can calculate a timestamp two hours before the value contained in <\/span>_time<\/span>. <\/span>now()<\/span> returns the current epoch timestamp but does not by itself perform relative calculations against another field. <\/span>strftime()<\/span> formats epoch time into a string, while <\/span>strptime()<\/span> parses a string into epoch time. <\/span>relative_time()<\/span> is therefore the appropriate function when a search needs to perform relative time arithmetic.<\/span><\/p>\n

                            Question 294. An analyst wants to compare event timestamps against the exact current epoch time while a search is running. Which SPL function returns the current epoch timestamp?<\/b><\/p>\n

                              \n
                            1. <\/b> relative_time()<\/span><\/li>\n
                            2. <\/b> now()<\/span><\/li>\n
                            3. <\/b> strftime()<\/span><\/li>\n
                            4. <\/b> strptime()<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2. <\/b>now()<\/b><\/p>\n

                              Explanation :-<\/b><\/p>\n

                              The <\/span>now()<\/span> function returns the current time as an epoch timestamp. It can be used in SPL expressions when a search needs to compare event timestamps or calculate elapsed time relative to the current moment. <\/span>relative_time()<\/span> is used to calculate a time relative to another timestamp, while <\/span>strftime()<\/span> formats an epoch timestamp as a readable string. <\/span>strptime()<\/span> converts a formatted date-time string into epoch time. Using <\/span>now()<\/span> is therefore appropriate when the search needs the current epoch value for calculations or comparisons.<\/span><\/p>\n

                              Question 295. A field contains several values separated by commas. The analyst needs to determine how many values are present after converting the field into a multivalue field. Which function should be used to count the values?<\/b><\/p>\n

                                \n
                              1. <\/b> mvindex()<\/span><\/li>\n
                              2. <\/b> mvcount()<\/span><\/li>\n
                              3. <\/b> mvjoin()<\/span><\/li>\n
                              4. <\/b> mvfind()<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2. <\/b>mvcount()<\/b><\/p>\n

                                Explanation :-<\/b><\/p>\n

                                The <\/span>mvcount()<\/span> function returns the number of values contained in a multivalue field. A common workflow is to first use <\/span>split()<\/span> to convert a delimiter-separated string into a multivalue field and then use <\/span>mvcount()<\/span> to determine how many individual values it contains. <\/span>mvindex()<\/span> retrieves a specific value or range of values, while <\/span>mvjoin()<\/span> combines multivalue elements into a single string. <\/span>mvfind()<\/span> searches for a value matching a regular expression. When the requirement is simply to count the elements in a multivalue field, <\/span>mvcount()<\/span> is the appropriate function.<\/span><\/p>\n

                                Question 296. A multivalue field named <\/b>tags<\/b> contains several values, and the analyst needs to retrieve only the third value. Which SPL function should be used?<\/b><\/p>\n

                                  \n
                                1. <\/b> mvjoin()<\/span><\/li>\n
                                2. <\/b> mvfind()<\/span><\/li>\n
                                3. <\/b> mvindex()<\/span><\/li>\n
                                4. <\/b> mvcount()<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3. <\/b>mvindex()<\/b><\/p>\n

                                  Explanation :-<\/b><\/p>\n

                                  The <\/span>mvindex()<\/span> function retrieves one or more values from a multivalue field by position. It is useful when an analyst needs a specific element, such as the third value in a list. Splunk multivalue indexes are zero-based, so the third value is at index 2. <\/span>mvcount()<\/span> returns the number of values rather than a specific value. <\/span>mvjoin()<\/span> combines values into a single string, and <\/span>mvfind()<\/span> searches for a matching value based on a regular expression. Therefore, <\/span>mvindex()<\/span> is the appropriate function for retrieving a value by its position within a multivalue field.<\/span><\/p>\n

                                  Question 297. An analyst wants to return only the multivalue elements from <\/b>tags<\/b> that match a specified regular expression. Which SPL function is designed for this task?<\/b><\/p>\n

                                    \n
                                  1. <\/b> mvfilter()<\/span><\/li>\n
                                  2. <\/b> mvcount()<\/span><\/li>\n
                                  3. <\/b> mvindex()<\/span><\/li>\n
                                  4. <\/b> mvjoin()<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. <\/b>mvfilter()<\/b><\/p>\n

                                    Explanation :-<\/b><\/p>\n

                                    The <\/span>mvfilter()<\/span> function filters the values within a multivalue field according to a Boolean expression. It is useful when an analyst needs to keep only elements that satisfy a condition, including regular-expression-based conditions when used with appropriate SPL functions. <\/span>mvcount()<\/span> returns the number of elements, <\/span>mvindex()<\/span> retrieves elements by position, and <\/span>mvjoin()<\/span> converts multiple values into a single string. Multivalue functions are especially useful when events contain fields such as tags, groups, or categories that naturally contain several values. <\/span>mvfilter()<\/span> allows those values to be selectively retained without expanding the entire event set.<\/span><\/p>\n

                                    Question 298. A search has two multivalue fields, <\/b>user<\/b> and <\/b>role<\/b>, and the analyst wants to combine corresponding values from both fields into paired values. Which function is designed to combine multivalue fields element by element?<\/b><\/p>\n

                                      \n
                                    1. <\/b> mvmap()<\/span><\/li>\n
                                    2. <\/b> mvzip()<\/span><\/li>\n
                                    3. <\/b> mvexpand<\/span><\/li>\n
                                    4. <\/b> mvjoin()<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2. <\/b>mvzip()<\/b><\/p>\n

                                      Explanation :-<\/b><\/p>\n

                                      The <\/span>mvzip()<\/span> function combines two multivalue fields by pairing corresponding elements from each field. For example, values in a <\/span>user<\/span> field can be paired with values at the same positions in a <\/span>role<\/span> field. This is useful when related multivalue data must remain associated during subsequent processing. <\/span>mvmap()<\/span> applies an expression to each value of a multivalue field, while <\/span>mvexpand<\/span> creates separate events for each value. <\/span>mvjoin()<\/span> converts multivalue elements into a single string. <\/span>mvzip()<\/span> is therefore appropriate when the requirement is to preserve positional relationships between two multivalue fields.<\/span><\/p>\n

                                      Question 299. A JSON event contains nested objects, and the analyst needs to extract fields from the JSON structure rather than manually parsing individual key-value pairs. Which SPL command is designed for structured JSON extraction?<\/b><\/p>\n

                                        \n
                                      1. <\/b> rex<\/span><\/li>\n
                                      2. <\/b> spath<\/span><\/li>\n
                                      3. <\/b> regex<\/span><\/li>\n
                                      4. <\/b> replace<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2. <\/b>spath<\/b><\/p>\n

                                        Explanation :-<\/b><\/p>\n

                                        The <\/span>spath<\/span> command is designed to extract information from structured data such as JSON. It can navigate nested objects and arrays using path expressions and can also extract fields from JSON stored in a field such as <\/span>_raw<\/span>. <\/span>rex<\/span> is primarily used for regular-expression-based extraction from text, while <\/span>regex<\/span> filters events according to regular-expression matching. <\/span>replace<\/span> performs value substitutions. For structured JSON data, <\/span>spath<\/span> is generally more appropriate because it understands the hierarchical structure instead of requiring the analyst to construct regular expressions for every field.<\/span><\/p>\n

                                        Question 300. A lookup file contains reference data that should be added to the current search results, but existing field values should not be overwritten by values from the lookup. Which lookup behavior should the analyst use?<\/b><\/p>\n

                                          \n
                                        1. <\/b> OUTPUT<\/span><\/li>\n
                                        2. <\/b> OUTPUTNEW<\/span><\/li>\n
                                        3. <\/b> append=true<\/span><\/li>\n
                                        4. <\/b> local=true<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2. <\/b>OUTPUTNEW<\/b><\/p>\n

                                          Explanation :-<\/b><\/p>\n

                                          The <\/span>OUTPUTNEW<\/span> option in a lookup adds lookup values only when the corresponding output fields do not already exist in the search results. This helps prevent existing field values from being overwritten by lookup data. By contrast, <\/span>OUTPUT<\/span> can write lookup values to the specified output fields, potentially replacing existing values. <\/span>append=true<\/span> is associated with lookup-table writing or input behavior rather than controlling whether existing fields are overwritten during a lookup. <\/span>local=true<\/span> controls lookup execution scope. When preserving existing search-result values is required, <\/span>OUTPUTNEW<\/span> provides the appropriate behavior.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Splunk SPLK-5002 Exam Dumps and Practice Test Dumps   Question 281. An analyst wants to run a search that returns only the user field from the results of a subsearch. Which SPL construct is most appropriate for returning a field value from a subsearch? append return format appendcols Correct Answer: 2. return Explanation […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21689"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=21689"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21689\/revisions"}],"predecessor-version":[{"id":21690,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21689\/revisions\/21690"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=21689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=21689"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=21689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}