Splunk SPLK-3002 Online Practice Questions and Exam Preparation

Splunk SPLK-3002 Online Questions & Answers

• Question 71:

  Which of the following is a characteristic of notable event groups?

  A. Notable event groups combine independent notable events.
  B. Notable event groups are created in the itsi_tracked_alerts index.
  C. Notable event groups allow users to adjust threshold settings.
  D. All of the above.
  A. Notable event groups combine independent notable events.

• Question 72:

  What is the range for a normal Service Health score category?

  A. 20-40
  B. 40-60
  C. 60-80
  D. 80-100
  D. 80-100

• Question 73:

  Which of the following are deployment recommendations for ITSI? (Choose all that apply.)

  A. Deployments often require an increase of hardware resources above base Splunk requirements.
  B. Deployments require a dedicated ITSI search head.
  C. Deployments may increase the number of required indexers based on the number of KPI searches.
  D. Deployments should use fastest possible disk arrays for indexers.
  A. Deployments often require an increase of hardware resources above base Splunk requirements.
  B. Deployments require a dedicated ITSI search head.
  C. Deployments may increase the number of required indexers based on the number of KPI searches.

• Question 74:

  What effects does the KPI importance weight of 11 have on the overall health score of a service?

  A. At least 10% of the KPIs will go critical.
  B. Importance weight is unused for health scoring.
  C. The service will go critical.
  D. It is a minimum health indicator KPI.
  B. Importance weight is unused for health scoring.

• Question 75:

  Which of the following is a characteristic of base searches?

  A. Search expression, entity splitting rules, and thresholds are configured at the base search level.
  B. It is possible to filter to entities assigned to the service for calculating the metrics for the service's KPIs.
  C. The fewer KPIs that share a common base search, the more efficiency a base search provides, and anomaly detection is more efficient.
  D. The base search will execute whether or not a KPI needs it.
  B. It is possible to filter to entities assigned to the service for calculating the metrics for the service's KPIs.

• Question 76:

  Which ITSI components are required before a module can be created?

  A. One or more entity import saved searches.
  B. One or more services with KPIs and their associated base searches.
  C. One or more datamodels.
  D. One or more correlation searches and their associated entities.
  C. One or more datamodels.

• Question 77:

  Which index contains ITSI Episodes?

  A. itsi_tracked_alerts
  B. itsi_grouped_alerts
  C. itsi_notable_archive
  D. itsi_summary
  B. itsi_grouped_alerts

• Question 78:

  Which of the following is an advantage of using adaptive time thresholds?

  A. Automatically update thresholds daily to manage dynamic changes to KPI values.
  B. Automatically adjust KPI calculation to manage dynamic event data.
  C. Automatically adjust aggregation policy grouping to manage escalating severity.
  D. Automatically adjust correlation search thresholds to adjust sensitivity over time.
  A. Automatically update thresholds daily to manage dynamic changes to KPI values.

• Question 79:

  Which of the following describes default deep dives?

  A. Are manually generated and can be accessed via the Service Analyzer.
  B. Include all KPIs of all services.
  C. Are auto-generated and can be accessed via the Service Analyzer.
  D. Include health scores of all services.
  C. Are auto-generated and can be accessed via the Service Analyzer.

• Question 80:

  When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?

  A. Gray
  B. Purple
  C. Gear Icon
  D. Blue
  A. Gray