Splunk SPLK-3002 Online Practice Questions and Exam Preparation

Splunk SPLK-3002 Online Questions & Answers

• Question 31:

  How can admins manually control groupings of notable events?

  A. Correlation searches.
  B. Multi-KPI alerts.
  C. notable_event_grouping.conf
  D. Aggregation policies.
  D. Aggregation policies.

• Question 32:

  Which index is used to store KPI values?

  A. itsi_summary_metrics
  B. itsi_metrics
  C. itsi_service_health
  D. itsi_summary
  A. itsi_summary_metrics

• Question 33:

  Which of the following is an advantage of an adaptive time threshold?

  A. Automatically alerting when KPI value patterns change over time.
  B. Automatically adjusting thresholds as normal KPI values change over time.
  C. Automatically adjusting to holiday schedules.
  D. Automatically predicting future degradation of KPI values over time.
  B. Automatically adjusting thresholds as normal KPI values change over time.

• Question 34:

  After ITSI is initially deployed for the operations department at a large company, another department would like to use ITSI but wants to keep their information private from the operations group. How can this be achieved?

  A. Create service templates for each group and create the services from the templates.
  B. Create teams for each department and assign KPIs to each team.
  C. Create services for each group and set the permissions of the services to restrict them to each group.
  D. Create teams for each department and assign services to the teams.
  D. Create teams for each department and assign services to the teams.

• Question 35:

  Which of the following describes a realistic troubleshooting workflow in ITSI?

  A. Correlation Search ?gt; Deep Dive ?gt; Notable Event
  B. Service Analyzer ?gt; Notable Event Review ?gt; Deep Dive
  C. Service Analyzer ?gt; Aggregation Policy ?gt; Deep Dive
  D. Correlation search ?gt; KPI ?gt; Aggregation Policy
  B. Service Analyzer ?gt; Notable Event Review ?gt; Deep Dive

• Question 36:

  When working with a notable event group in the Notable Events Review dashboard, which of the following can be set at the individual or group level?

  A. Service, status, owner.
  B. Severity, status, owner.
  C. Severity, comments, service.
  D. Severity, status, service.
  B. Severity, status, owner.

• Question 37:

  Which scenario would benefit most by implementing ITSI?

  A. Monitoring of business services functionality.
  B. Monitoring of system hardware.
  C. Monitoring of system process statuses
  D. Monitoring of retail sales metrics.
  A. Monitoring of business services functionality.

• Question 38:

  In maintenance mode, which features of KPIs still function?

  A. KPI searches will execute but will be buffered until the maintenance window is over.
  B. KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.
  C. New KPIs can be created, but existing KPIs are locked.
  D. KPI calculations and threshold settings can be modified.
  A. KPI searches will execute but will be buffered until the maintenance window is over.

• Question 39:

  When a KPI's aggregate value is calculated, which function is called?

  A. stats
  B. tstats
  C. fieldsummary
  D. eval
  B. tstats

• Question 40:

  Which of the following is a problem requiring correction in ITSI?

  A. Twoormore entitieswiththe same service ID.
  B. Twoormore entitieswiththe same entity ID.
  C. Twoormore entitieswiththe same value in a single alias field.
  D. Twoormore entitieswiththe same entity key value inanyinfo field.
  C. Twoormore entitieswiththe same value in a single alias field.