Splunk SPLK-3002 Exam Dumps

Splunk SPLK-3002 Sample Question Answers

Splunk SPLK-3002 Sample Questions

Question # 1

Which glass table feature can be used to toggle displaying KPI values from more than oneservice on a single widget?

A. Service templates.
B. Service dependencies.
C. Ad-hoc search.
D. Service swapping.

Answer: C

Show Answer

Question # 2

Which capabilities are enabled through “teams”?

A. Teams allow searches against the itsi_summary index.
B. Teams restrict notable event alert actions.
C. Teams restrict searches against the itsi_notable_audit index.
D. Teams allow restrictions to service content in UI views.

Answer: A

Show Answer

Question # 3

Which index contains ITSI Episodes?

A. itsi_tracked_alerts
B. itsi_grouped_alerts
C. itsi_notable_archive
D. itsi_summary

Answer: C

Show Answer

Question # 4

Which of the following describes enabling smart mode for an aggregation policy?

A. Configure –> Policies –> Smart Mode –> Enable, select “fields”, click “Save”
B. Enable grouping in Notable Event Review, select “Smart Mode”, select “fields”, and click“Save”
C. Edit the aggregation policy, enable smart mode, select fields to analyze, click “Save”
D. Edit the notable event view, enable smart mode, select “fields”, and click “Save”

Answer: A

Show Answer

Question # 5

Which of the following items apply to anomaly detection? (Choose all that apply.)

A. Use AD on KPIs that have an unestablished baseline of data points. This allows the MLpattern to perform it’s magic.
B. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4entities for cohesive analysis.
C. Anomaly detection automatically generates notable events when KPI data diverges fromthe pattern.
D. There are 3 types of anomaly detection supported in ITSI: adhoc, trending, andcohesive.

Answer: B,C

Show Answer

Question # 6

What is an episode?

A. A workflow task.
B. A deep dive.
C. A notable event group.
D. A notable event.

Answer: D

Show Answer

Question # 7

Which of the following is a best practice when configuring maintenance windows?

A. Disable any glass tables that reference a KPI that is part of an open maintenancewindow.
B. Develop a strategy for configuring a service’s notable event generation when theservice’s maintenance window is open.
C. Give the maintenance window a buffer, for example, 15 minutes before and after actualmaintenance work.
D. Change the color of services and entities that are part of an open maintenance windowin the service analyzer.

Answer: C

Show Answer

Question # 8

Which index is used to store KPI values?

A. itsi_summary_metrics
B. itsi_metrics
C. itsi_service_health
D. itsi_summary

Answer: A

Show Answer

Question # 9

Which of the following is a valid type of Multi-KPI Alert?

A. Score over composite.
B. Value over time.
C. Status over time.
D. Rise over run.

Answer: C

Show Answer

Question # 10

Which of the following is the best use case for configuring a Multi-KPI Alert?

A. Comparing content between two notable events.
B. Using machine learning to evaluate when data falls outside of an expected pattern.
C. Comparing anomaly detection between two KPIs.
D. Raising an alert when one or more KPIs indicate an outage is occurring.

Answer: A

Show Answer

Question # 11

In Episode Review, what is the result of clicking an episode’s Acknowledge button?

A. Assign the current user as owner.
B. Change status from New to Acknowledged.
C. Change status from New to In Progress and assign the current user as owner.
D. Change status from New to Acknowledged and assign the current user as owner.

Answer: C

Show Answer

Question # 12

Which of the following accurately describes base searches used for KPIs in a service?

A. Base searches can be used for multiple services.
B. A base search can only be used by its service and all dependent services.
C. All the metrics in a base search are used by one service.
D. All the KPIs in a service use the same base search.

Answer: A

Show Answer

Question # 13

There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other’s services. What are the role configuration stepsrequired to accomplish this?

A. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited fromitoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst,inherited from itoa_analyst.
B. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited fromitoa_team_admin; itoa_finance_analyst, inherited from itoa_team_analyst;itoa_sales_analyst, inherited from itoa_team_analyst.
C. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited fromitoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst,inherited from itoa_team_analyst.
D. itoa_finance_admin, inherited from itoa_team_admin; itoa_sales_admin, inherited fromitoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst,inherited from itoa_analyst.

Answer: C

Show Answer

Question # 14

Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)

A. Comparing a service’s notable events over a time period.
B. Visualizing one or more Service KPIs values by time.
C. Examining and comparing alert levels for KPIs in a service over time.
D. Comparing swim lane values for a slice of time.

Answer: B,C,D

Show Answer

Question # 15

Which deep dive swim lane type does not require writing SPL?

A. Event lane.
B. Automatic lane.
C. Metric lane.
D. KPI lane.

Answer: B

Show Answer