SPLK-3002 Exam Questions
100 real SPLK-3002 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #55
Which of the following is an adaptive threshold best practice?
- Question #58
Which of the following accurately describes an individual notable event?
- Question #59
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- Question #60
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
- Question #61
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
- Question #62
Which deep dive swim lane type does not require writing SPL?
- Question #63
Which of the following items apply to anomaly detection? (Choose all that apply.)
- Question #64
Which of the following is a best practice when configuring maintenance windows?
- Question #65
In Episode Review, what is the result of clicking an episode's Acknowledge button?
- Question #66
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
- Question #67
Which of the following is a characteristic of base searches?
- Question #68
Which of the following statements describe default glass tables in ITSI?
- Question #69
Which of the following is part of setting up a new aggregation policy?
- Question #70
Which of the following is a recommended best practice for ITSI installation?
- Question #71
Which views would help an analyst identify that a memory usage KPI is going critical? (select all that apply)
- Question #72
How should entities be handled during the data audit phase of requirements gathering?
- Question #73
What is the minimum number of entities a KPI must be split by in order to use Entity Cohesion anomaly detection?
- Question #74
Which of the following statements is accurate when using multiple policies?
- Question #75
Which of the following describes entities? (Choose all that apply.)
- Question #76
Which of the following describes a realistic troubleshooting workflow in ITSI?
- Question #77
Which of the following accurately describes base searches used for KPIs in a service?
- Question #78
Which scenario would benefit most by implementing ITSI?
- Question #79
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?
- Question #80
What effects does the KPI importance weight of 11 have on the overall health score of a service?
- Question #81
Which of the following is an advantage of using adaptive time thresholds?
- Question #82
Which of the following applies when configuring time policies for KPI thresholds?
- Question #83
What is the main purpose of the service analyzer?
- Question #84
What is the default importance value for dependent services' health scores?
- Question #85
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- Question #86
When a KPI's aggregate value is calculated, which function is called?
- Question #87
Which of the following describes default deep dives?
- Question #88
Which of the following is a problem requiring correction in ITSI?
- Question #89
Which of the following is a good use case for a Multi-KPI alert?
- Question #90
Which of the following actions can be performed with a deep dive?
- Question #91
Which of the following is an advantage of an adaptive time threshold?
- Question #92
Which of the following best describes an ITSI Glass Table?
- Question #93
Which step is required to install ITSI on a single Search Head?
- Question #94
What happens when an anomaly is detected?
- Question #95
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)
- Question #96
Which of the following is the best use case for configuring a Multi-KPI Alert?
- Question #97
In distributed search, which components need to be installed on instances other than the search head?
- Question #98
When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?
- Question #99
When changing a service template, which of the following will be added to linked services by default?
- Question #100
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- Question #101
Buttercup Retail sells t shirts both online and in stores. The IT Operations team is effectively monitoring the digital infrastructure. However, the executive leadership has expres...
- Question #102
Helga has a web service that depends on the database service to provide her website. She configures the database's "Heartbeat" KPI to be a dependency in the web service. When viewi...
- Question #103
In a distributed deployment, the ITSI SA-IndexCreation should get installed on which of the following Splunk instance types?
- Question #104
Which anomaly detection algorithm fulfills the paired monitoring requirement?
- Question #105
Fritz is looking at a Deep Dive with a lane showing the average percent of CPU usage across the four web servers in the web farm. Seeing a spike, he wants to add the graphs of each...
- Question #106
Which material would be least useful while planning and designing a service tree for an application team within the company?