無料更新されたSplunk SPLK-3002テストエンジン問題には54問あります
ベストな問題集を使おうSplunk IT Service SPLK-3002専門試験問題
Splunk SPLK-3002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
| トピック 9 |
|
| トピック 10 |
|
| トピック 11 |
|
| トピック 12 |
|
| トピック 13 |
|
質問 32
Which of the following is a good use case regarding defining entities for a service?
- A. Being able to split a CPU usage KPI by host name.
- B. KPI total values are aggregated from multiple different category values in the source events.
- C. Automatically associate entities to services using multiple entity aliases.
- D. All of the entities have the same identifying field name.
正解: C
解説:
Explanation
Define entities before creating services. When you configure a service, you can specify entity matching rules based on entity aliases that automatically add the entities to your service.
質問 33
What is the default importance value for dependent services' health scores?
- A. 0
- B. 1
- C. Unassigned
- D. 2
正解: D
解説:
Explanation
By default, impacting service health scores have an importance value of 11.
質問 34
Which of the following is a recommended best practice for service and glass table design?
- A. Start with base searches, then services, and then glass tables.
- B. Always use the standard icons for glass table widgets to improve portability.
- C. Design glass tables first to discover which KPIs are important.
- D. Plan and implement services first, then build detailed glass tables.
正解: C
質問 35
Which of the following describes a way to delete multiple duplicate entities in ITSI?
- A. Via a search using the | deleteentity command.
- B. All of the above.
- C. Via the entity lister page.
- D. Via c CSV upload.
正解: D
解説:
Explanation
Import entities from CSV files that contain one or more entity definitions. Importing entities from CSV files is an efficient way to define multiple entities.
質問 36
For which ITSI function is it a best practice to use a 15-30 minute time buffer?
- A. Maintenance windows
- B. Correlation searches.
- C. Anomaly detection.
- D. Adaptive thresholding.
正解: A
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 37
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
- A. Ad-hoc search.
- B. Service dependencies.
- C. Service swapping.
- D. Service templates.
正解: A
質問 38
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
- A. Analyze the business to determine the most critical services.
- B. Focus on low-level services.
- C. Define a large number of key services early.
- D. Only include KPIs if they will be used in multiple services.
正解: D
質問 39
Which of the following best describes a default deep dive?
- A. It initially shows all the entity swim lanes.
- B. It initially shows all of the KPIs for a selected service.
- C. It initially shows the health scores for all services.
- D. It initially shows the highest importance KPIs.
正解: A
質問 40
Which of the following items apply to anomaly detection? (Choose all that apply.)
- A. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
- B. Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
- C. Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it's magic.
- D. There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.
正解: A,B
質問 41
Anomaly detection can be enabled on which one of the following?
- A. Service
- B. Multi-KPI alert
- C. Entity
- D. KPI
正解: D
解説:
Explanation
Enable anomaly detection to identify trends and outliers in KPI search results that might indicate an issue with your system.
質問 42
When in maintenance mode, which of the following is accurate?
- A. Service health scores and KPI events are deleted until the window is over.
- B. Once the window is over, KPIs and notable events will begin to be generated again.
- C. KPIs are shown in blue while in maintenance mode.
- D. Maintenance mode slots are scheduled on a per hour basis.
正解: B
質問 43
What are valid considerations when designing an ITSI Service? (Choose all that apply.)
- A. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
- B. Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.
- C. Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.
- D. Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.
正解: A,B
質問 44
Which of the following is a valid type of Multi-KPI Alert?
- A. Rise over run.
- B. Score over composite.
- C. Value over time.
- D. Status over time.
正解: D
質問 45
What effects does the KPI importance weight of 11 have on the overall health score of a service?
- A. It is a minimum health indicator KPI.
- B. At least 10% of the KPIs will go critical.
- C. The service will go critical.
- D. Importance weight is unused for health scoring.
正解: A
質問 46
Which deep dive swim lane type does not require writing SPL?
- A. Event lane.
- B. Automatic lane.
- C. KPI lane.
- D. Metric lane.
正解: B
解説:
Explanation
Among all the search configurations, automatic lane doesn't need to be written in Splunk Processing language.
質問 47
Which of the following is an advantage of using adaptive time thresholds?
- A. Automatically adjust KPI calculation to manage dynamic event data.
- B. Automatically update thresholds daily to manage dynamic changes to KPI values.
- C. Automatically adjust correlation search thresholds to adjust sensitivity over time.
- D. Automatically adjust aggregation policy grouping to manage escalating severity.
正解: B
質問 48
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- A. Comparing swim lane values for a slice of time.
- B. Examining and comparing alert levels for KPIs in a service over time.
- C. Comparing a service's notable events over a time period.
- D. Visualizing one or more Service KPIs values by time.
正解: A,B,D
質問 49
What is the main purpose of the service analyzer?
- A. Monitor overall Service and KPI status.
- B. Display a list of All Services and Entities.
- C. Trigger external alerts based on threshold violations.
- D. Allow Analysts to add comments to Alerts.
正解: D
質問 50
Which of the following describes entities? (Choose all that apply.)
- A. Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
- B. Multiple entities can share the same alias value, but must have different role values.
- C. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
- D. To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".
正解: D
質問 51
When installing ITSI to support a Distributed Search Architecture, which of the following items apply?
(Choose all that apply.)
- A. Extract installer package into etc/apps directory of the cluster deployer node.
- B. Copy SA-IndexCreation to all indexers.
- C. Extract ITSI app package into etc/apps directory of search head.
- D. Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.
正解: B
解説:
Explanation
Copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on all individual indexers in your environment.
質問 52
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- A. Use | stats functions in custom fields to prepare the data for KPI calculations.
- B. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
- C. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
- D. Plan to build as many data models as possible for ITSI to leverage
正解: B
質問 53
......
100%の合格率を試そう！更新されたのはSPLK-3002試験問題 [2022年更新]：https://jp.fast2test.com/SPLK-3002-premium-file.html
合格させるSPLK-3002試験にはリアル問題解答：https://drive.google.com/open?id=1hCLMCqbux2g9l_1YAVEYhcevmyDrK_BI