Exam SPLK-1004 topic 1 question 9 discussion

C. Run a search that uses a lookup and save as an alert. In Splunk, lookups are used within searches to enrich or filter data. To reference a lookup in an alert, you must first create a search that incorporates the lookup (e.g., using the inputlookup or lookup command). Once the search is defined and tested, it can be saved as an alert to trigger based on specific conditions.

You can either use the | outputlookup command in the alert search or select the "Output results to lookup". My first tought was A. But this doesn't seem to be the topic. Apparantly this question is talking about using a lookup in an alert, not outputing results, C is correct. Something like | lookup <lookup_name> <lookup-field> OUTPUT <lookup-field1> ...