Free Splunk IT Service Intelligence Certified Admin Exam Practice Questions

A.  

Assign the current user as owner.

B.  

Change status from New to Acknowledged.

C.  

Change status from New to In Progress and assign the current user as owner.

D.  

Change status from New to Acknowledged and assign the current user as owner.

A.  

A person can only configure 24 policies, one for each hour of the day.

B.  

They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00

C.  

If a person expects a KPI to change significantly through a cycle on a daily basis, don’t use it.

D.  

It is possible for multiple time policies to overlap.

A.  

Comparing a service’s notable events over a time period.

B.  

Visualizing one or more Service KPIs values by time.

C.  

Examining and comparing alert levels for KPIs in a service over time.

D.  

Comparing swim lane values for a slice of time.

A.  

Correlation Search –> Deep Dive –> Notable Event

B.  

Service Analyzer –> Notable Event Review –> Deep Dive

C.  

Service Analyzer –> Aggregation Policy –> Deep Dive

D.  

Correlation search –> KPI –> Aggregation Policy

A.  

_introspection

B.  

_internal

C.  

itsi_summary

D.  

itsi_notable_audit

A.  

itsi_notable_archive

B.  

itsi_notable_audit

C.  

itsi_tracked_alerts

D.  

itsi_tracked_groups

A.  

He did not split the KPI by entity.

B.  

He did not enable entity filtering.

C.  

He configured the KPI to split by pseudo‑entity.

D.  

He configured the service with only three entities.

A.  

Automatically associate entities to services using multiple entity aliases.

B.  

All of the entities have the same identifying field name.

C.  

Being able to split a CPU usage KPI by host name.

D.  

KPI total values are aggregated from multiple different category values in the source events.

A.  

KPI searches will execute but will be buffered until the maintenance window is over.

B.  

KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.

C.  

New KPIs can be created, but existing KPIs are locked.

D.  

KPI calculations and threshold settings can be modified.

A.  

11

B.  

1

C.  

Unassigned

D.  

10