Attested SPLK-3002 Dumps PDF Resource [2022]
Latest SPLK-3002 Actual Free Exam Questions Updated 54 Questions
NEW QUESTION 20
Which of the following are the default ports that must be configured on Splunk to use ITSI?
- A. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)
- B. SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)
- C. SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)
- D. SplunkWeb (8088), SplunkD (8089), and HTTP Collector (8000)
Answer: A
NEW QUESTION 21
When in maintenance mode, which of the following is accurate?
- A. Once the window is over, KPIs and notable events will begin to be generated again.
- B. KPIs are shown in blue while in maintenance mode.
- C. Maintenance mode slots are scheduled on a per hour basis.
- D. Service health scores and KPI events are deleted until the window is over.
Answer: A
NEW QUESTION 22
What effects does the KPI importance weight of 11 have on the overall health score of a service?
- A. It is a minimum health indicator KPI.
- B. At least 10% of the KPIs will go critical.
- C. The service will go critical.
- D. Importance weight is unused for health scoring.
Answer: A
NEW QUESTION 23
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- A. Visualizing one or more Service KPIs values by time.
- B. Comparing a service's notable events over a time period.
- C. Examining and comparing alert levels for KPIs in a service over time.
- D. Comparing swim lane values for a slice of time.
Answer: A,C,D
NEW QUESTION 24
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)
- A. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
- B. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
- C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
- D. ITSI backups are stored as a collection of JSON formatted files.
Answer: C,D
Explanation:
Explanation
ITSI provides a kvstore_to_json.py script that lets you backup/restore ITSI configuration data, perform bulk service KPI operations, apply time zone offsets for ITSI objects, and regenerate KPI search schedules.
When you run a backup job, ITSI saves your data to a set of JSON files compressed into a single ZIP file.
NEW QUESTION 25
Which of the following is a valid type of Multi-KPI Alert?
- A. Score over composite.
- B. Rise over run.
- C. Status over time.
- D. Value over time.
Answer: C
NEW QUESTION 26
Anomaly detection can be enabled on which one of the following?
- A. KPI
- B. Service
- C. Multi-KPI alert
- D. Entity
Answer: A
Explanation:
Explanation
Enable anomaly detection to identify trends and outliers in KPI search results that might indicate an issue with your system.
NEW QUESTION 27
Which of the following is a good use case regarding defining entities for a service?
- A. All of the entities have the same identifying field name.
- B. KPI total values are aggregated from multiple different category values in the source events.
- C. Being able to split a CPU usage KPI by host name.
- D. Automatically associate entities to services using multiple entity aliases.
Answer: D
Explanation:
Explanation
Define entities before creating services. When you configure a service, you can specify entity matching rules based on entity aliases that automatically add the entities to your service.
NEW QUESTION 28
Which index contains ITSI Episodes?
- A. itsi_notable_archive
- B. itsi_tracked_alerts
- C. itsi_grouped_alerts
- D. itsi_summary
Answer: A
NEW QUESTION 29
Which of the following describes a way to delete multiple duplicate entities in ITSI?
- A. Via c CSV upload.
- B. Via the entity lister page.
- C. All of the above.
- D. Via a search using the | deleteentity command.
Answer: A
Explanation:
Explanation
Import entities from CSV files that contain one or more entity definitions. Importing entities from CSV files is an efficient way to define multiple entities.
NEW QUESTION 30
Which of the following accurately describes base searches used for KPIs in a service?
- A. Base searches can be used for multiple services.
- B. A base search can only be used by its service and all dependent services.
- C. All the KPIs in a service use the same base search.
- D. All the metrics in a base search are used by one service.
Answer: A
Explanation:
Explanation
KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI).
Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.
NEW QUESTION 31
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?
- A. If this value is set to 0, the scheduler bases its determination of the next scheduled search execution time on the current time.
- B. If this value is set to 0, the scheduler may skip scheduled execution periods.
- C. If this value is set to 0, the scheduler might skip some execution periods to make sure that the scheduler is executing the searches running over the most recent time range.
- D. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time.
Answer: D
Explanation:
Explanation
If set to 0, the scheduler determines the next scheduled search run time based on the last run time for the search. This is called continuous scheduling.
NEW QUESTION 32
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- A. Plan to build as many data models as possible for ITSI to leverage
- B. Use | stats functions in custom fields to prepare the data for KPI calculations.
- C. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
- D. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
Answer: C
NEW QUESTION 33
There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other's services. What are the role configuration steps required to accomplish this?
- A. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
- B. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_team_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
- C. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
- D. itoa_finance_admin, inherited from itoa_team_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
Answer: A
NEW QUESTION 34
Which of the following is an advantage of using adaptive time thresholds?
- A. Automatically adjust KPI calculation to manage dynamic event data.
- B. Automatically adjust aggregation policy grouping to manage escalating severity.
- C. Automatically update thresholds daily to manage dynamic changes to KPI values.
- D. Automatically adjust correlation search thresholds to adjust sensitivity over time.
Answer: C
NEW QUESTION 35
Which of the following is the best use case for configuring a Multi-KPI Alert?
- A. Raising an alert when one or more KPIs indicate an outage is occurring.
- B. Comparing content between two notable events.
- C. Comparing anomaly detection between two KPIs.
- D. Using machine learning to evaluate when data falls outside of an expected pattern.
Answer: B
NEW QUESTION 36
For which ITSI function is it a best practice to use a 15-30 minute time buffer?
- A. Adaptive thresholding.
- B. Correlation searches.
- C. Anomaly detection.
- D. Maintenance windows
Answer: D
Explanation:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
NEW QUESTION 37
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A. 1 year.
- B. 9 months.
- C. 6 months.
- D. 3 months.
Answer: C
Explanation:
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
NEW QUESTION 38
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
- A. Analyze the business to determine the most critical services.
- B. Only include KPIs if they will be used in multiple services.
- C. Define a large number of key services early.
- D. Focus on low-level services.
Answer: B
NEW QUESTION 39
What is the default importance value for dependent services' health scores?
- A. 0
- B. 1
- C. Unassigned
- D. 2
Answer: B
Explanation:
Explanation
By default, impacting service health scores have an importance value of 11.
NEW QUESTION 40
In distributed search, which components need to be installed on instances other than the search head?
- A. SA-ITSI-Licensechecker on indexers.
- B. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.
- C. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
- D. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
Answer: B
Explanation:
Explanation
SA-IndexCreation is required on all indexers. For non-clustered, distributed environments, copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on individual indexers.
NEW QUESTION 41
......
SPLK-3002 Certification Overview Latest SPLK-3002 PDF Dumps: https://www.examtorrent.com/SPLK-3002-valid-vce-dumps.html
Free SPLK-3002 Exam Braindumps certification guide Q&A: https://drive.google.com/open?id=19egfLKDY2AWQXI6h4QrDIPuISXWFUfb9
