Splunk SPLK-3002 Online Practice Questions and Exam Preparation

Splunk SPLK-3002 Online Questions & Answers

• Question 21:

  Which of the following best describes a default deep dive?

  A. It initially shows the health scores for all services.
  B. It initially shows the highest importance KPIs.
  C. It initially shows all of the KPIs for a selected service.
  D. It initially shows all the entity swim lanes.
  C. It initially shows all of the KPIs for a selected service.

• Question 22:

  When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?

  A. SA-ITOA
  B. ITSI app
  C. All ITSI components
  D. SA-ITSI-Licensechecker
  B. ITSI app

• Question 23:

  Which of the following are characteristics of ITSI service dependencies? (select all that apply)

  A. If a primary service has a dependent service KPI and the KPI's importance level is changed, the dependency is broken.
  B. It is best practice to use the dependent service's built-in 'ServiceHealthScore' KPI to reflect impact to the primary service.
  C. Setting the dependent service KPI importance level will be treated as any other KPI in the primary service's health score.
  D. Impactful dependent services should only be configured to one primary service to avoid false negatives in Multi KPI Alerts.
  B. It is best practice to use the dependent service's built-in 'ServiceHealthScore' KPI to reflect impact to the primary service.
  C. Setting the dependent service KPI importance level will be treated as any other KPI in the primary service's health score.

• Question 24:

  Which deep dive swim lane type does not require writing SPL?

  A. Event lane.
  B. Automatic lane.
  C. Metric lane.
  D. KPI lane.
  D. KPI lane.

• Question 25:

  Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

  A. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
  B. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
  C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
  D. ITSI backups are stored as a collection of JSON formatted files.
  C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
  D. ITSI backups are stored as a collection of JSON formatted files.

• Question 26:

  Which of the following accurately describes base searches used for KPIs in a service?

  A. Base searches can be used for multiple services.
  B. A base search can only be used by its service and all dependent services.
  C. All the metrics in a base search are used by one service.
  D. All the KPIs in a service use the same base search.
  A. Base searches can be used for multiple services.

• Question 27:

  Which ITSI functions generate notable events? (Choose all that apply.)

  A. KPI threshold breaches.
  B. KPI anomaly detection.
  C. Multi-KPI alert.
  D. Correlation search.
  A. KPI threshold breaches.
  B. KPI anomaly detection.
  D. Correlation search.

• Question 28:

  Which index will contain useful error messages when troubleshooting ITSI issues?

  A. _introspection
  B. _internal
  C. itsi_summary
  D. itsi_notable_audit
  B. _internal

• Question 29:

  Which anomaly detection algorithm is included within ITSI?

  A. Entity cohesion
  B. Standard deviation
  C. Linear regression
  D. Infantile regression
  A. Entity cohesion

• Question 30:

  What can a KPI widget on a glass table drill down into?

  A. Another glass table.
  B. A Splunk dashboard.
  C. A custom deep dive.
  D. Any of the above.
  D. Any of the above.