[2021] Pass SPLK-3002 Exam - Real Questions & Answers [Q28-Q44]

[2021] Pass SPLK-3002 Exam - Real Questions & Answers

SPLK-3002 Exam Questions Get Updated [2021] with Correct Answers

Splunk SPLK-3002 Exam Syllabus Topics:

Topic	Details
Topic 1	Create and Customize New Custom Deep Dives Add and Configure Swim Lanes Describe Effective Workflows for Troubleshooting
Topic 2	Managing Notable Events Define Key Notable Events Terms and their Relationships Describe Examples of Multi-KPI Alerts
Topic 3	Given Customer Requirements, Plan an ITSI Implementation Identify Site Entities Data Audit and Base Searches
Topic 4	Glass Tables, Describe Glass Tables Use Glass Tables Design Glass Tables Configure Glass Tables
Topic 5	Describe the Notable Events Workflow Work with Notable Events Investigating Issues with Deep Dives
Topic 6	Using Entities in KPI Searches Templates and Dependencies Use Templates to Manage Services Define Dependencies Between Services
Topic 7	Use a Data Audit to Identify Service Key Performance Indicators Use a Service Design to Implement Services in ITSI Thresholds and Time Policies
Topic 8	Define Multi KPI Alerts Manage Notable Event Storage Aggregation Policies Create New Aggregation Policies
Topic 9	Configure User Access Control Create Service Level Teams Troubleshooting ITSI Backup and Restore Maintenance Mode, Creating Modules, Troubleshooting
Topic 10	Create KPIs with Static and Adaptive Thresholds Use Time Policies to Define Flexible Thresholds Entities and Modules, Importing Entities
Topic 11	Describe the Installation Procedure Identify Data Input Options for ITSI Add Custom Data to an ITSI Deployment
Topic 12	Identify What ITSI Does Describe Reasons for Using ITSI Examine the ITSI User Interface
Topic 13	Anomaly Detection Enable Anomaly Detection Work with Generated Anomaly Events Correlation and Multi KPI Searches Define New Correlation Searches
Topic 14	Installing and Configuring ITSI List ITSI Hardware Recommendations Describe ITSI Deployment Options Identify ITSI Components
Topic 15	Describe Deep Dive Concepts and Their Relationships Describe Deep Dive Concepts and Their Relationships Use Default Deep Dives

 

NEW QUESTION 28
When in maintenance mode, which of the following is accurate?

• A. Once the window is over, KPIs and notable events will begin to be generated again.
• B. Service health scores and KPI events are deleted until the window is over.
• C. KPIs are shown in blue while in maintenance mode.
• D. Maintenance mode slots are scheduled on a per hour basis.

Answer: A

 

NEW QUESTION 29
Which of the following describes enabling smart mode for an aggregation policy?

• A. Edit the notable event view, enable smart mode, select "fields", and click "Save"
• B. Edit the aggregation policy, enable smart mode, select fields to analyze, click "Save"
• C. Enable grouping in Notable Event Review, select "Smart Mode", select "fields", and click "Save"
• D. Configure -> Policies -> Smart Mode -> Enable, select "fields", click "Save"

Answer: D

Explanation:
Explanation
1. From the ITSI main menu, click Configuration > Notable Event Aggregation Policies.
2. Select a custom policy or the Default Policy.
3. Under Smart Mode grouping, enable Smart Mode.
4. Click Select fields. A dialog displays the fields found in your notable events from the last 24 hours.

 

NEW QUESTION 30
When must a service define entity rules?

• A. If some or all of the KPIs in the service will be split by entity.
• B. To enable entity cohesion anomaly detection.
• C. If the intention is for the KPIs in the service to filter to only entities assigned to the service.
• D. If the intention is for the KPIs in the service to have different aggregate vs. entity KPI values.

Answer: C

Explanation:
Explanation
Provide a value to filter the service to a specific set of entities. These entity rule values are meant to be custom for each service.

 

NEW QUESTION 31
Which of the following describes entities? (Choose all that apply.)

• A. Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
• B. Multiple entities can share the same alias value, but must have different role values.
• C. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
• D. To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".

Answer: D

 

NEW QUESTION 32
Which index contains ITSI Episodes?

• A. itsi_summary
• B. itsi_notable_archive
• C. itsi_tracked_alerts
• D. itsi_grouped_alerts

Answer: B

 

NEW QUESTION 33
What are valid considerations when designing an ITSI Service? (Choose all that apply.)

• A. Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.
• B. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
• C. Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.
• D. Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.

Answer: A,B

 

NEW QUESTION 34
Which capabilities are enabled through "teams"?

• A. Teams restrict notable event alert actions.
• B. Teams allow searches against the itsi_summary index.
• C. Teams restrict searches against the itsi_notable_audit index.
• D. Teams allow restrictions to service content in UI views.

Answer: B

Explanation:
Explanation
Teams provide presentation-layer security only and not data-level security. It's still possible for a user with access to the Splunk search bar to look up ITSI summary index data.

 

NEW QUESTION 35
Which index is used to store KPI values?

• A. itsi_summary
• B. itsi_summary_metrics
• C. itsi_metrics
• D. itsi_service_health

Answer: B

Explanation:
Explanation
The IT Service Intelligence (ITSI) metrics summary index, itsi_summary_metrics, is a metrics-based summary index that stores KPI data.

 

NEW QUESTION 36
What is the default importance value for dependent services' health scores?

• A. Unassigned
• B. 0
• C. 1
• D. 2

Answer: D

Explanation:
Explanation
By default, impacting service health scores have an importance value of 11.

 

NEW QUESTION 37
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

• A. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
• B. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
• C. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
• D. ITSI backups are stored as a collection of JSON formatted files.

Answer: A,D

Explanation:
Explanation
ITSI provides a kvstore_to_json.py script that lets you backup/restore ITSI configuration data, perform bulk service KPI operations, apply time zone offsets for ITSI objects, and regenerate KPI search schedules.
When you run a backup job, ITSI saves your data to a set of JSON files compressed into a single ZIP file.

 

NEW QUESTION 38
How do you automatically restrict a KPI to only the entities in its service, and generate KPI values for each entity?

• A. Select "No" for both "Split by Entity" and "Filter to Entities in Service".
• B. Select "Yes" for "Split by Entity" and "No" for "Filter to Entities in Service".
• C. Select "Yes" for both "Split by Entity" and "Filter to Entities in Service".
• D. Select "No" for "Split by Entity" and "Yes" for "Filter to Entities in Service".

Answer: C

 

NEW QUESTION 39
Which of the following accurately describes base searches used for KPIs in a service?

• A. All the KPIs in a service use the same base search.
• B. All the metrics in a base search are used by one service.
• C. Base searches can be used for multiple services.
• D. A base search can only be used by its service and all dependent services.

Answer: C

Explanation:
Explanation
KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI).
Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.

 

NEW QUESTION 40
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

• A. Plan to build as many data models as possible for ITSI to leverage
• B. Use | stats functions in custom fields to prepare the data for KPI calculations.
• C. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
• D. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.

Answer: D

 

NEW QUESTION 41
Which deep dive swim lane type does not require writing SPL?

• A. KPI lane.
• B. Metric lane.
• C. Event lane.
• D. Automatic lane.

Answer: D

Explanation:
Explanation
Among all the search configurations, automatic lane doesn't need to be written in Splunk Processing language.

 

NEW QUESTION 42
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?

• A. Purple
• B. Gray
• C. Blue
• D. Gear Icon

Answer: B

Explanation:
Explanation
Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.

 

NEW QUESTION 43
Within a correlation search, dynamic field values can be specified with what syntax?

• A. <fieldname /fieldname>
• B. %fieldname%
• C. fieldname
• D. eval(fieldname)

Answer: C

 

NEW QUESTION 44
......

Practice SPLK-3002 Questions With Certification guide Q&A from Training Expert BootcampPDF: https://www.bootcamppdf.com/SPLK-3002_exam-dumps.html

Free Splunk SPLK-3002 Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=1TDGWG5hJ9wBjnERfK-abx_y0201bgrTD