Splunk SPLK-3002 Online Practice Questions and Exam Preparation

Splunk SPLK-3002 Online Questions & Answers

• Question 1:

  Which of the following items describe ITSI teams? (select all that apply)

  A. Teams should have itoa admin roles added with read-only permissions for services and entities.
  B. Services should be assigned to the 'global' team if all users need access to it.
  C. By default, all services are owned by the built-in 'global' team and administered by the 'itoa_admin' role.
  D. A new team admin role should be created for each team. The new role should inherit the 'itoa_team_admin' role.
  B. Services should be assigned to the 'global' team if all users need access to it.
  C. By default, all services are owned by the built-in 'global' team and administered by the 'itoa_admin' role.
  D. A new team admin role should be created for each team. The new role should inherit the 'itoa_team_admin' role.

• Question 2:

  When in maintenance mode, which of the following is accurate?

  A. Once the window is over, KPIs and notable events will begin to be generated again.
  B. KPIs are shown in blue while in maintenance mode.
  C. Maintenance mode slots are scheduled on a per hour basis.
  D. Service health scores and KPI events are deleted until the window is over.
  A. Once the window is over, KPIs and notable events will begin to be generated again.

• Question 3:

  When changing a service template, which of the following will be added to linked services by default?

  A. Thresholds.
  B. Entity Rules.
  C. New KPIs.
  D. Health score.
  C. New KPIs.

• Question 4:

  Which of the following are characteristics of service templates? (select all that apply)

  A. Service templates can be modified after services are instantiated from it.
  B. Service templates contain KPIs and KPI thresholds.
  C. Service templates can contain specific or generic entity rules.
  D. Service templates contain domain specific dashboards and deep dives.
  B. Service templates contain KPIs and KPI thresholds.
  C. Service templates can contain specific or generic entity rules.

• Question 5:

  What is an episode?

  A. A workflow task.
  B. A deep dive.
  C. A notable event group.
  D. A notable event.
  C. A notable event group.

• Question 6:

  There are two Smart Mode configuration settings that control how fields affect grouping. Which of these is correct?

  A. Text deviation and category deviation.
  B. Text similarity and category deviation.
  C. Text similarity and category similarity.
  D. Text deviation and category similarity.
  C. Text similarity and category similarity.

• Question 7:

  Within a correlation search, dynamic field values can be specified with what syntax?

  A. fieldname
  C. %fieldname%
  D. eval(fieldname)
  B

• Question 8:

  Which of the following is a good use case for creating a custom module?

  A. Modules are required to create entity and service import searches.
  B. Modules are required to be able to create custom visualizations for deep dives.
  C. Making it easy to migrate KPI base searches and related visualizations to other ITSI installations.
  D. Creating a service template to make it easy to automatically create new services during service and entity import.
  C. Making it easy to migrate KPI base searches and related visualizations to other ITSI installations.

• Question 9:

  What is the main purpose of the service analyzer?

  A. Display a list of All Services and Entities.
  B. Trigger external alerts based on threshold violations.
  C. Allow Analysts to add comments to Alerts.
  D. Monitor overall Service and KPI status.
  D. Monitor overall Service and KPI status.

• Question 10:

  What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

  A. Use | stats functions in custom fields to prepare the data for KPI calculations.
  B. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
  C. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
  D. Plan to build as many data models as possible for ITSI to leverage
  B. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.