SPLK-3002 Exam Questions

Which of the following is an adaptive threshold best practice?

Which of the following accurately describes an individual notable event?

After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?

Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?

When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?

Which deep dive swim lane type does not require writing SPL?

Which of the following items apply to anomaly detection? (Choose all that apply.)

Which of the following is a best practice when configuring maintenance windows?

In Episode Review, what is the result of clicking an episode's Acknowledge button?

Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?

Which of the following is a characteristic of base searches?

Which of the following statements describe default glass tables in ITSI?

Which of the following is part of setting up a new aggregation policy?

Which of the following is a recommended best practice for ITSI installation?

Which views would help an analyst identify that a memory usage KPI is going critical? (select all that apply)

How should entities be handled during the data audit phase of requirements gathering?

What is the minimum number of entities a KPI must be split by in order to use Entity Cohesion anomaly detection?

Which of the following statements is accurate when using multiple policies?

Which of the following describes entities? (Choose all that apply.)

Which of the following describes a realistic troubleshooting workflow in ITSI?

Which of the following accurately describes base searches used for KPIs in a service?

Which scenario would benefit most by implementing ITSI?

ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?

What effects does the KPI importance weight of 11 have on the overall health score of a service?

Which of the following is an advantage of using adaptive time thresholds?

Which of the following applies when configuring time policies for KPI thresholds?

What is the main purpose of the service analyzer?

What is the default importance value for dependent services' health scores?

What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

When a KPI's aggregate value is calculated, which function is called?

Which of the following describes default deep dives?

Which of the following is a problem requiring correction in ITSI?

Which of the following is a good use case for a Multi-KPI alert?

Which of the following actions can be performed with a deep dive?

Which of the following is an advantage of an adaptive time threshold?

Which of the following best describes an ITSI Glass Table?

Which step is required to install ITSI on a single Search Head?

What happens when an anomaly is detected?

What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)

Which of the following is the best use case for configuring a Multi-KPI Alert?

In distributed search, which components need to be installed on instances other than the search head?

When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?

When changing a service template, which of the following will be added to linked services by default?

Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)

Buttercup Retail sells t shirts both online and in stores. The IT Operations team is effectively monitoring the digital infrastructure. However, the executive leadership has expres...

Helga has a web service that depends on the database service to provide her website. She configures the database's "Heartbeat" KPI to be a dependency in the web service. When viewi...

In a distributed deployment, the ITSI SA-IndexCreation should get installed on which of the following Splunk instance types?

Which anomaly detection algorithm fulfills the paired monitoring requirement?

Fritz is looking at a Deep Dive with a lane showing the average percent of CPU usage across the four web servers in the web farm. Seeing a spike, he wants to add the graphs of each...

Which material would be least useful while planning and designing a service tree for an application team within the company?