Free SPLK-3002 Exam Study Guide for the NEW [Jul-2022] Dumps Test Engine [Q30-Q54] – IT Certification Exam Questions & Answers

Rate this post

Free SPLK-3002 Exam Study Guide for the NEW [Jul-2022] Dumps Test Engine

SPLK-3002 PDF Dumps Extremely Quick Way Of Preparation

QUESTION 30
What effects does the KPI importance weight of 11 have on the overall health score of a service?

At least 10% of the KPIs will go critical.

Importance weight is unused for health scoring.

The service will go critical.

It is a minimum health indicator KPI.

QUESTION 31
When changing a service template, which of the following will be added to linked services by default?

Thresholds.

Entity Rules.

New KPIs.

Health score.

QUESTION 32
Which of the following best describes a default deep dive?

It initially shows all the entity swim lanes.

It initially shows the health scores for all services.

It initially shows all of the KPIs for a selected service.

It initially shows the highest importance KPIs.

QUESTION 33
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

Use | stats functions in custom fields to prepare the data for KPI calculations.

Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.

Make sure that all fields conform to CIM, then use the corresponding module to import related services.

Plan to build as many data models as possible for ITSI to leverage

QUESTION 34
In Episode Review, what is the result of clicking an episode’s Acknowledge button?

Assign the current user as owner.

Change status from New to Acknowledged.

Change status from New to In Progress and assign the current user as owner.

Change status from New to Acknowledged and assign the current user as owner.

QUESTION 35
What is an episode?

A workflow task.

A deep dive.

A notable event group.

A notable event.

QUESTION 36
When installing ITSI to support a Distributed Search Architecture, which of the following items apply?
(Choose all that apply.)

Copy SA-IndexCreation to all indexers.

Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.

Extract installer package into etc/apps directory of the cluster deployer node.

Extract ITSI app package into etc/apps directory of search head.

QUESTION 37
Which of the following describes a realistic troubleshooting workflow in ITSI?

Correlation Search -> Deep Dive -> Notable Event

Service Analyzer -> Notable Event Review -> Deep Dive

Service Analyzer -> Aggregation Policy -> Deep Dive

Correlation search -> KPI -> Aggregation Policy

QUESTION 38
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

A pre-configured default ITSI backup job is provided that can be modified, but not deleted.

ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.

kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.

ITSI backups are stored as a collection of JSON formatted files.

QUESTION 39
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?

If this value is set to 0, the scheduler bases its determination of the next scheduled search execution time on the current time.

If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time.

If this value is set to 0, the scheduler may skip scheduled execution periods.

If this value is set to 0, the scheduler might skip some execution periods to make sure that the scheduler is executing the searches running over the most recent time range.

QUESTION 40
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?

Service templates.

Service dependencies.

Ad-hoc search.

Service swapping.

QUESTION 41
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?

6 months.

9 months.

1 year.

3 months.

QUESTION 42
When in maintenance mode, which of the following is accurate?

Once the window is over, KPIs and notable events will begin to be generated again.

KPIs are shown in blue while in maintenance mode.

Maintenance mode slots are scheduled on a per hour basis.

Service health scores and KPI events are deleted until the window is over.

QUESTION 43
Within a correlation search, dynamic field values can be specified with what syntax?

fieldname

%fieldname%

eval(fieldname)

QUESTION 44
In distributed search, which components need to be installed on instances other than the search head?

SA-IndexCreation and SA-ITSI-Licensechecker on indexers.

SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.

SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.

SA-ITSI-Licensechecker on indexers.

QUESTION 45
Which of the following accurately describes base searches used for KPIs in a service?

Base searches can be used for multiple services.

A base search can only be used by its service and all dependent services.

All the metrics in a base search are used by one service.

All the KPIs in a service use the same base search.

QUESTION 46
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)

Creating glass tables.

Correlation search creation.

Service swapping configuration.

Adding KPI metric lanes to glass tables.

QUESTION 47
Which of the following describes entities? (Choose all that apply.)

Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.

An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.

Multiple entities can share the same alias value, but must have different role values.

To automatically restrict the KPI to only the entities in a particular service, select “Filter to Entities in Service”.

QUESTION 48
Which index will contain useful error messages when troubleshooting ITSI issues?

_introspection

_internal

itsi_summary

itsi_notable_audit

QUESTION 49
Where are KPI search results stored?

The default index.

KV Store.

Output to a CSV lookup.

The itsi_summary index.