A.True

B.False

A.False

B.True

A.=

B.>

C.!=

D.<=

E.?=

A.Once a search job begins, it cannot be stopped

B.A search job can only be paused when less than 50% of events are returned

C.A search job can only be stopped when less than 50% of events are returned

D.Once a search job begins, it can be stopped or paused at any point in time

A.Before clauses. For example: stats sum(bytes) | by host

B.Before commands. For example: | stats sum(bytes) by host

C.Before arguments. For example: stats sum| (bytes) by host

D.Before functions. For example: stats |sum(bytes) by host