SPLK-3002 Practice Questions

A.  

Untar the ITSI package in /etc/apps

B.  

Run splunk_apply shcluster-bundle

C.  

Use the Splunk -> Manage Apps Dashboard to download and install.

D.  

All of the above.

A.  

Score over composite.

B.  

Value over time.

C.  

Status over time.

D.  

Rise over run.

A.  

Service templates.

B.  

Service dependencies.

C.  

Ad-hoc search.

D.  

Service swapping.

A.  

Allows itoa_analyst roles to add comments.

B.  

Requires at least 7 days' data to show anomalies.

C.  

Combines metric, event, KPI, and service health score lanes.

D.  

Uses drilldown to generate notable events via anomaly detection.

A.  

Monitoring of business services functionality.

B.  

Monitoring of system hardware.

C.  

Monitoring of system process statuses

D.  

Monitoring of retail sales metrics.

A.  

Deployments often require an increase of hardware resources above base Splunk requirements.

B.  

Deployments require a dedicated ITSI search head.

C.  

Deployments may increase the number of required indexers based on the number of KPI searches.

D.  

Deployments should use fastest possible disk arrays for indexers.

A.  

Indexers and forwarders

B.  

Search heads, indexers, and heavy forwarders

C.  

Search heads, indexers, and universal forwarders

D.  

Indexers and search heads

A.  

Select “Yes” for both “Split by Entity” and “Filter to Entities in Service”.

B.  

Select “No” for “Split by Entity” and “Yes” for “Filter to Entities in Service”.

C.  

Select “Yes” for “Split by Entity” and “No” for “Filter to Entities in Service”.

D.  

Select “No” for both “Split by Entity” and “Filter to Entities in Service”.