[2022年03月] 更新されたのはSplunk SPLK-3002問題集PDFオンラインエンジン
SPLK-3002.PDFで問題解答！サンプル問題は信頼され続けます
Splunk SPLK-3002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
質問 30
Which of the following is an advantage of using adaptive time thresholds?
- A. Automatically adjust aggregation policy grouping to manage escalating severity.
- B. Automatically adjust correlation search thresholds to adjust sensitivity over time.
- C. Automatically adjust KPI calculation to manage dynamic event data.
- D. Automatically update thresholds daily to manage dynamic changes to KPI values.
正解: D
質問 31
Which capabilities are enabled through "teams"?
- A. Teams restrict notable event alert actions.
- B. Teams restrict searches against the itsi_notable_audit index.
- C. Teams allow searches against the itsi_summary index.
- D. Teams allow restrictions to service content in UI views.
正解: C
解説:
Explanation
Teams provide presentation-layer security only and not data-level security. It's still possible for a user with access to the Splunk search bar to look up ITSI summary index data.
質問 32
Which of the following is a recommended best practice for service and glass table design?
- A. Design glass tables first to discover which KPIs are important.
- B. Start with base searches, then services, and then glass tables.
- C. Always use the standard icons for glass table widgets to improve portability.
- D. Plan and implement services first, then build detailed glass tables.
正解: A
質問 33
When in maintenance mode, which of the following is accurate?
- A. Service health scores and KPI events are deleted until the window is over.
- B. Once the window is over, KPIs and notable events will begin to be generated again.
- C. KPIs are shown in blue while in maintenance mode.
- D. Maintenance mode slots are scheduled on a per hour basis.
正解: B
質問 34
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
- A. Ad-hoc search.
- B. Service dependencies.
- C. Service swapping.
- D. Service templates.
正解: A
質問 35
Which scenario would benefit most by implementing ITSI?
- A. Monitoring of system hardware.
- B. Monitoring of system process statuses
- C. Monitoring of retail sales metrics.
- D. Monitoring of business services functionality.
正解: D
質問 36
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- A. Make sure that all fields conform to CIM, then use the corresponding module to import related services.
- B. Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
- C. Plan to build as many data models as possible for ITSI to leverage
- D. Use | stats functions in custom fields to prepare the data for KPI calculations.
正解: B
質問 37
Which of the following describes enabling smart mode for an aggregation policy?
- A. Configure -> Policies -> Smart Mode -> Enable, select "fields", click "Save"
- B. Enable grouping in Notable Event Review, select "Smart Mode", select "fields", and click "Save"
- C. Edit the aggregation policy, enable smart mode, select fields to analyze, click "Save"
- D. Edit the notable event view, enable smart mode, select "fields", and click "Save"
正解: A
解説:
Explanation
1. From the ITSI main menu, click Configuration > Notable Event Aggregation Policies.
2. Select a custom policy or the Default Policy.
3. Under Smart Mode grouping, enable Smart Mode.
4. Click Select fields. A dialog displays the fields found in your notable events from the last 24 hours.
質問 38
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)
- A. Creating glass tables.
- B. Service swapping configuration.
- C. Adding KPI metric lanes to glass tables.
- D. Correlation search creation.
正解: A,B,C
解説:
Explanation
Create a glass table to visualize and monitor the interrelationships and dependencies across your IT and business services.
The service swapping settings are saved and apply the next time you open the glass table.
You can add metrics like KPIs, ad hoc searches, and service health scores that update in real time against a background that you design. Glass tables show real-time data generated by KPIs and services.
質問 39
For which ITSI function is it a best practice to use a 15-30 minute time buffer?
- A. Anomaly detection.
- B. Adaptive thresholding.
- C. Correlation searches.
- D. Maintenance windows
正解: D
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 40
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)
- A. ITSI backups are stored as a collection of JSON formatted files.
- B. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
- C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
- D. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
正解: A,C
解説:
Explanation
ITSI provides a kvstore_to_json.py script that lets you backup/restore ITSI configuration data, perform bulk service KPI operations, apply time zone offsets for ITSI objects, and regenerate KPI search schedules.
When you run a backup job, ITSI saves your data to a set of JSON files compressed into a single ZIP file.
質問 41
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A. 6 months.
- B. 1 year.
- C. 3 months.
- D. 9 months.
正解: A
解説:
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
質問 42
In maintenance mode, which features of KPIs still function?
- A. KPI calculations and threshold settings can be modified.
- B. KPI searches will execute but will be buffered until the maintenance window is over.
- C. New KPIs can be created, but existing KPIs are locked.
- D. KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.
正解: B
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 43
Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)
- A. Send email.
- B. Run a script.
- C. Ping a host.
- D. Include in RSS feed.
正解: A,B,D
解説:
Explanation
Throttling applies to any correlation search alert type, including notable events and actions (RSS feed, email, run script, and ticketing).
質問 44
What is the default importance value for dependent services' health scores?
- A. 0
- B. 1
- C. Unassigned
- D. 2
正解: B
解説:
Explanation
By default, impacting service health scores have an importance value of 11.
質問 45
In distributed search, which components need to be installed on instances other than the search head?
- A. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
- B. SA-ITSI-Licensechecker on indexers.
- C. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.
- D. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
正解: C
解説:
Explanation
SA-IndexCreation is required on all indexers. For non-clustered, distributed environments, copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on individual indexers.
質問 46
Within a correlation search, dynamic field values can be specified with what syntax?
- A. fieldname
- B. <fieldname /fieldname>
- C. %fieldname%
- D. eval(fieldname)
正解: A
質問 47
Which of the following is a best practice when configuring maintenance windows?
- A. Develop a strategy for configuring a service's notable event generation when the service's maintenance window is open.
- B. Disable any glass tables that reference a KPI that is part of an open maintenance window.
- C. Change the color of services and entities that are part of an open maintenance window in the service analyzer.
- D. Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
正解: D
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work.
質問 48
Which index is used to store KPI values?
- A. itsi_service_health
- B. itsi_metrics
- C. itsi_summary_metrics
- D. itsi_summary
正解: C
解説:
Explanation
The IT Service Intelligence (ITSI) metrics summary index, itsi_summary_metrics, is a metrics-based summary index that stores KPI data.
質問 49
Which of the following describes a way to delete multiple duplicate entities in ITSI?
- A. Via a search using the | deleteentity command.
- B. All of the above.
- C. Via the entity lister page.
- D. Via c CSV upload.
正解: D
解説:
Explanation
Import entities from CSV files that contain one or more entity definitions. Importing entities from CSV files is an efficient way to define multiple entities.
質問 50
Which index will contain useful error messages when troubleshooting ITSI issues?
- A. _internal
- B. _introspection
- C. itsi_notable_audit
- D. itsi_summary
正解: A
質問 51
......
Splunk SPLK-3002問題集PDFのベストを目指すなら問題集を使おう！高得点目指すならここ：https://jp.fast2test.com/SPLK-3002-premium-file.html
Splunk IT Service SPLK-3002試験と認定テストエンジン：https://drive.google.com/open?id=15iLAwPIVEESqYDNDXgZjA7uyZicdQMFV