無料2022年最新のSPLK-3002問題集で100%合格保証には最新の サンプル
準備SPLK-3002問題解答無料更新には100%試験合格保証 [2022]
Splunk SPLK-3002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 13
What are valid considerations when designing an ITSI Service? (Choose all that apply.)
- A. Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.
- B. Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.
- C. Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.
- D. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
正解: C,D
質問 14
In maintenance mode, which features of KPIs still function?
- A. KPI searches will execute but will be buffered until the maintenance window is over.
- B. New KPIs can be created, but existing KPIs are locked.
- C. KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.
- D. KPI calculations and threshold settings can be modified.
正解: A
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 15
What is the default importance value for dependent services' health scores?
- A. 0
- B. 1
- C. 2
- D. Unassigned
正解: C
解説:
Explanation
By default, impacting service health scores have an importance value of 11.
質問 16
Which of the following best describes a default deep dive?
- A. It initially shows the highest importance KPIs.
- B. It initially shows all of the KPIs for a selected service.
- C. It initially shows all the entity swim lanes.
- D. It initially shows the health scores for all services.
正解: C
質問 17
Which of the following is a best practice when configuring maintenance windows?
- A. Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
- B. Disable any glass tables that reference a KPI that is part of an open maintenance window.
- C. Develop a strategy for configuring a service's notable event generation when the service's maintenance window is open.
- D. Change the color of services and entities that are part of an open maintenance window in the service analyzer.
正解: A
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work.
質問 18
Which of the following is an advantage of using adaptive time thresholds?
- A. Automatically adjust KPI calculation to manage dynamic event data.
- B. Automatically adjust correlation search thresholds to adjust sensitivity over time.
- C. Automatically update thresholds daily to manage dynamic changes to KPI values.
- D. Automatically adjust aggregation policy grouping to manage escalating severity.
正解: C
質問 19
What effects does the KPI importance weight of 11 have on the overall health score of a service?
- A. Importance weight is unused for health scoring.
- B. At least 10% of the KPIs will go critical.
- C. The service will go critical.
- D. It is a minimum health indicator KPI.
正解: D
質問 20
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A. 1 year.
- B. 6 months.
- C. 3 months.
- D. 9 months.
正解: B
解説:
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
質問 21
When in maintenance mode, which of the following is accurate?
- A. KPIs are shown in blue while in maintenance mode.
- B. Service health scores and KPI events are deleted until the window is over.
- C. Once the window is over, KPIs and notable events will begin to be generated again.
- D. Maintenance mode slots are scheduled on a per hour basis.
正解: C
質問 22
Which of the following describes entities? (Choose all that apply.)
- A. Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
- B. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
- C. To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".
- D. Multiple entities can share the same alias value, but must have different role values.
正解: C
質問 23
When installing ITSI to support a Distributed Search Architecture, which of the following items apply?
(Choose all that apply.)
- A. Extract installer package into etc/apps directory of the cluster deployer node.
- B. Copy SA-IndexCreation to all indexers.
- C. Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.
- D. Extract ITSI app package into etc/apps directory of search head.
正解: B
解説:
Explanation
Copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on all individual indexers in your environment.
質問 24
Which of the following accurately describes base searches used for KPIs in a service?
- A. All the metrics in a base search are used by one service.
- B. A base search can only be used by its service and all dependent services.
- C. All the KPIs in a service use the same base search.
- D. Base searches can be used for multiple services.
正解: D
解説:
Explanation
KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI).
Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.
質問 25
In Episode Review, what is the result of clicking an episode's Acknowledge button?
- A. Change status from New to In Progress and assign the current user as owner.
- B. Change status from New to Acknowledged and assign the current user as owner.
- C. Assign the current user as owner.
- D. Change status from New to Acknowledged.
正解: A
解説:
Explanation
When an episode warrants investigation, the analyst acknowledges the episode, which moves the status from New to In Progress.
質問 26
Which index will contain useful error messages when troubleshooting ITSI issues?
- A. itsi_notable_audit
- B. itsi_summary
- C. _internal
- D. _introspection
正解: C
質問 27
Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)
- A. Include in RSS feed.
- B. Send email.
- C. Run a script.
- D. Ping a host.
正解: A,B,C
解説:
Explanation
Throttling applies to any correlation search alert type, including notable events and actions (RSS feed, email, run script, and ticketing).
質問 28
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)
- A. Correlation search creation.
- B. Creating glass tables.
- C. Adding KPI metric lanes to glass tables.
- D. Service swapping configuration.
正解: B,C,D
解説:
Explanation
Create a glass table to visualize and monitor the interrelationships and dependencies across your IT and business services.
The service swapping settings are saved and apply the next time you open the glass table.
You can add metrics like KPIs, ad hoc searches, and service health scores that update in real time against a background that you design. Glass tables show real-time data generated by KPIs and services.
質問 29
Anomaly detection can be enabled on which one of the following?
- A. Service
- B. Multi-KPI alert
- C. Entity
- D. KPI
正解: D
解説:
Explanation
Enable anomaly detection to identify trends and outliers in KPI search results that might indicate an issue with your system.
質問 30
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)
- A. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
- B. ITSI backups are stored as a collection of JSON formatted files.
- C. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
- D. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
正解: A,B
解説:
Explanation
ITSI provides a kvstore_to_json.py script that lets you backup/restore ITSI configuration data, perform bulk service KPI operations, apply time zone offsets for ITSI objects, and regenerate KPI search schedules.
When you run a backup job, ITSI saves your data to a set of JSON files compressed into a single ZIP file.
質問 31
Which of the following is a recommended best practice for service and glass table design?
- A. Plan and implement services first, then build detailed glass tables.
- B. Always use the standard icons for glass table widgets to improve portability.
- C. Start with base searches, then services, and then glass tables.
- D. Design glass tables first to discover which KPIs are important.
正解: D
質問 32
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- A. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
- B. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
- C. Plan to build as many data models as possible for ITSI to leverage
- D. Use | stats functions in custom fields to prepare the data for KPI calculations.
正解: A
質問 33
When must a service define entity rules?
- A. To enable entity cohesion anomaly detection.
- B. If the intention is for the KPIs in the service to filter to only entities assigned to the service.
- C. If the intention is for the KPIs in the service to have different aggregate vs. entity KPI values.
- D. If some or all of the KPIs in the service will be split by entity.
正解: B
解説:
Explanation
Provide a value to filter the service to a specific set of entities. These entity rule values are meant to be custom for each service.
質問 34
......
リアル問題集Splunk SPLK-3002試験問題 [更新されたのは2022年]：https://jp.fast2test.com/SPLK-3002-premium-file.html
無料SPLK-3002試験問題集合格させるお手軽に試験合格：https://drive.google.com/open?id=1hCLMCqbux2g9l_1YAVEYhcevmyDrK_BI