PDF問題（2022年最新）実際のSplunk SPLK-3002試験問題
問題集返金保証付きのSPLK-3002問題集には90%オフされます
Splunk SPLK-3002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 26
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A. 6 months.
- B. 1 year.
- C. 3 months.
- D. 9 months.
正解: A
解説:
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
質問 27
When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?
- A. SA-ITOA
- B. SA-ITSI-Licensechecker
- C. All ITSI components
- D. ITSI app
正解: B
解説:
Explanation
Install SA-ITSI-Licensechecker and SA-UserAccess on any license master in a distributed or search head cluster environment. If a search head in your environment is also a license master, the license master components are installed when you install ITSI on the search heads.
質問 28
What is the main purpose of the service analyzer?
- A. Trigger external alerts based on threshold violations.
- B. Display a list of All Services and Entities.
- C. Allow Analysts to add comments to Alerts.
- D. Monitor overall Service and KPI status.
正解: C
質問 29
Which of the following items apply to anomaly detection? (Choose all that apply.)
- A. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
- B. Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it's magic.
- C. Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
- D. There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.
正解: A,C
質問 30
Anomaly detection can be enabled on which one of the following?
- A. Multi-KPI alert
- B. Service
- C. KPI
- D. Entity
正解: C
解説:
Explanation
Enable anomaly detection to identify trends and outliers in KPI search results that might indicate an issue with your system.
質問 31
Where are KPI search results stored?
- A. KV Store.
- B. The default index.
- C. The itsi_summary index.
- D. Output to a CSV lookup.
正解: C
解説:
Explanation
Search results are processed, created, and written to the itsi_summary index via an alert action.
質問 32
When in maintenance mode, which of the following is accurate?
- A. Service health scores and KPI events are deleted until the window is over.
- B. Once the window is over, KPIs and notable events will begin to be generated again.
- C. KPIs are shown in blue while in maintenance mode.
- D. Maintenance mode slots are scheduled on a per hour basis.
正解: B
質問 33
Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)
- A. Send email.
- B. Run a script.
- C. Ping a host.
- D. Include in RSS feed.
正解: A,B,D
解説:
Explanation
Throttling applies to any correlation search alert type, including notable events and actions (RSS feed, email, run script, and ticketing).
質問 34
For which ITSI function is it a best practice to use a 15-30 minute time buffer?
- A. Anomaly detection.
- B. Adaptive thresholding.
- C. Correlation searches.
- D. Maintenance windows
正解: D
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 35
Which of the following are deployment recommendations for ITSI? (Choose all that apply.)
- A. Deployments often require an increase of hardware resources above base Splunk requirements.
- B. Deployments should use fastest possible disk arrays for indexers.
- C. Deployments may increase the number of required indexers based on the number of KPI searches.
- D. Deployments require a dedicated ITSI search head.
正解: A,C,D
解説:
Explanation
You might need to increase the hardware specifications of your own Enterprise Security deployment above the minimum hardware requirements depending on your environment.
Install Splunk Enterprise Security on a dedicated search head or search head cluster.
The Splunk platform uses indexers to scale horizontally. The number of indexers required in an Enterprise Security deployment varies based on the data volume, data type, retention requirements, search type, and search concurrency.
質問 36
Which of the following is a valid type of Multi-KPI Alert?
- A. Rise over run.
- B. Score over composite.
- C. Status over time.
- D. Value over time.
正解: C
質問 37
Which ITSI functions generate notable events? (Choose all that apply.)
- A. Correlation search.
- B. Multi-KPI alert.
- C. KPI anomaly detection.
- D. KPI threshold breaches.
正解: A,C,D
解説:
Explanation
After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change.
ITSI generates notable events in Episode Review based on the alerting rules you configure.
Anomaly detection generates notable events when a KPI IT Service Intelligence (ITSI) deviates from an expected pattern.
Notable events are typically generated by a correlation search.
質問 38
What is the default importance value for dependent services' health scores?
- A. 0
- B. 1
- C. Unassigned
- D. 2
正解: B
解説:
Explanation
By default, impacting service health scores have an importance value of 11.
質問 39
Which scenario would benefit most by implementing ITSI?
- A. Monitoring of system hardware.
- B. Monitoring of system process statuses
- C. Monitoring of retail sales metrics.
- D. Monitoring of business services functionality.
正解: D
質問 40
What effects does the KPI importance weight of 11 have on the overall health score of a service?
- A. At least 10% of the KPIs will go critical.
- B. The service will go critical.
- C. It is a minimum health indicator KPI.
- D. Importance weight is unused for health scoring.
正解: C
質問 41
Which of the following applies when configuring time policies for KPI thresholds?
- A. It is possible for multiple time policies to overlap.
- B. They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00
- C. A person can only configure 24 policies, one for each hour of the day.
- D. If a person expects a KPI to change significantly through a cycle on a daily basis, don't use it.
正解: A
解説:
Explanation
If you're creating multiple time policies that require the same threshold values, you can save time by copying the threshold levels and their corresponding values from one policy to another.
質問 42
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?
- A. If this value is set to 0, the scheduler might skip some execution periods to make sure that the scheduler is executing the searches running over the most recent time range.
- B. If this value is set to 0, the scheduler bases its determination of the next scheduled search execution time on the current time.
- C. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time.
- D. If this value is set to 0, the scheduler may skip scheduled execution periods.
正解: C
解説:
Explanation
If set to 0, the scheduler determines the next scheduled search run time based on the last run time for the search. This is called continuous scheduling.
質問 43
Which of the following best describes a default deep dive?
- A. It initially shows all of the KPIs for a selected service.
- B. It initially shows the highest importance KPIs.
- C. It initially shows the health scores for all services.
- D. It initially shows all the entity swim lanes.
正解: D
質問 44
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- A. Examining and comparing alert levels for KPIs in a service over time.
- B. Comparing a service's notable events over a time period.
- C. Comparing swim lane values for a slice of time.
- D. Visualizing one or more Service KPIs values by time.
正解: A,C,D
質問 45
Which of the following accurately describes base searches used for KPIs in a service?
- A. All the metrics in a base search are used by one service.
- B. Base searches can be used for multiple services.
- C. A base search can only be used by its service and all dependent services.
- D. All the KPIs in a service use the same base search.
正解: B
解説:
Explanation
KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI).
Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.
質問 46
Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)
- A. ITSI backups are stored as a collection of JSON formatted files.
- B. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
- C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
- D. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
正解: A,C
解説:
Explanation
ITSI provides a kvstore_to_json.py script that lets you backup/restore ITSI configuration data, perform bulk service KPI operations, apply time zone offsets for ITSI objects, and regenerate KPI search schedules.
When you run a backup job, ITSI saves your data to a set of JSON files compressed into a single ZIP file.
質問 47
......
更新された2022年01月合格させるSPLK-3002試験リアル練習テスト問題：https://jp.fast2test.com/SPLK-3002-premium-file.html
あなたを合格させる試験には100%確認済みSPLK-3002試験問題：https://drive.google.com/open?id=1hCLMCqbux2g9l_1YAVEYhcevmyDrK_BI