Splunk SPLK-3002 Online Practice Questions and Exam Preparation

Splunk SPLK-3002 Online Questions & Answers

• Question 41:

  In Episode Review, what is the result of clicking an episode's Acknowledge button?

  A. Assign the current user as owner.
  B. Change status from New to Acknowledged.
  C. Change status from New to In Progress and assign the current user as owner.
  D. Change status from New to Acknowledged and assign the current user as owner.
  D. Change status from New to Acknowledged and assign the current user as owner.

• Question 42:

  How can Service Now incidents be created automatically when a Multi-KPI alert triggers? (select all that apply)

  A. By creating a custom etc/apps/SA-lTOA/workflow_rules. conf
  B. By linking Entities to Service-Now configuration items.
  C. By creating a notable event aggregation policy with a SNOW incident action.
  D. By editing the associated correlation search and specifying an alert action.
  C. By creating a notable event aggregation policy with a SNOW incident action.
  D. By editing the associated correlation search and specifying an alert action.

• Question 43:

  Which of the following are the default ports that must be configured on Splunk to use ITSI?

  A. SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)
  B. SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)
  C. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)
  D. SplunkWeb (8088), SplunkD (8089), and HTTP Collector (8000)
  C. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)

• Question 44:

  Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)

  A. Ping a host.
  B. Send email.
  C. Include in RSS feed.
  D. Run a script.
  B. Send email.
  C. Include in RSS feed.
  D. Run a script.

• Question 45:

  Which of the following statements describe default glass tables in ITSI?

  A. The Service Health Score default glass table.
  B. There is one default glass table per service.
  C. There is one service template default glass table.
  D. There are no default glass tables.
  D. There are no default glass tables.

• Question 46:

  Which of the following actions can be performed with a deep dive?

  A. Create a Multi-KPI alert from the deep dive's current state to warn of similar situations in the future.
  B. Create a predictive analysis model from the deep dive to warn of future service degradation.
  C. Create an anomaly detection alert to show when the same pattern begins in the future.
  D. Create a custom service analyzer from selected deep dive lanes.
  A. Create a Multi-KPI alert from the deep dive's current state to warn of similar situations in the future.

• Question 47:

  Which of the following items apply to anomaly detection? (Choose all that apply.)

  A. Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it's magic.
  B. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
  C. Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
  D. There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.
  B. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
  C. Anomaly detection automatically generates notable events when KPI data diverges from the pattern.

• Question 48:

  What is the default importance value for dependent services' health scores?

  A. 11
  B. 1
  C. Unassigned
  D. 10
  D. 10

• Question 49:

  Which step is required to install ITSI on a single Search Head?

  A. Untar the ITSI package in /etc/apps
  B. Run splunk_apply shcluster-bundle
  C. Use the Splunk -> Manage Apps Dashboard to download and install.
  D. All of the above.
  C. Use the Splunk -> Manage Apps Dashboard to download and install.

• Question 50:

  In distributed search, which components need to be installed on instances other than the search head?

  A. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.
  B. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA- UserAccess on the license master.
  C. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
  D. SA-ITSI-Licensechecker on indexers.
  A. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.