Which of the following searches will return events contains a tag name Privileged?

Which of the following searches will return events contains a tag name Privileged?
A . Tag= Priv
B . Tag= Pri*
C . Tag= Priv*
D . Tag= Privileged

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/PCI/4.1.0/Install/PrivilegedUserActivity

Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
Fabian
Fabian
2 years ago

sample answers are wrong.
C and D are supposed to be lowecase “priv*” and “privileged” otherwise they´d also be true.