Splunk IT Service Intelligence Certified Admin (SPLK-3002) Free Practice Test

Question 1

Which of the following is an advantage of using adaptive time thresholds?

A. Automatically adjust KPI calculation to manage dynamic event data.

B. Automatically adjust correlation search thresholds to adjust sensitivity over time.

C. Automatically update thresholds daily to manage dynamic changes to KPI values.

D. Automatically adjust aggregation policy grouping to manage escalating severity.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

How can admins manually control groupings of notable events?

A. Aggregation policies.

B. notable_event_grouping.conf

C. Correlation searches.

D. Multi-KPI alerts.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which of the following describes default deep dives?

A. Are manually generated and can be accessed via the Service Analyzer.

B. Include all KPIs of all services.

C. Are auto-generated and can be accessed via the Service Analyzer.

D. Include health scores of all services.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which of the following is a recommended best practice for ITSI installation?

A. Install ITSI on one search head in a search head cluster and migrate the configuration bundle to other search heads.

B. ITSI should not be installed on search heads that have Enterprise Security installed.

C. Before installing ITSI, make sure the Common Information Model (CIM) is installed.

D. Install the Machine Learning Toolkit app if anomaly detection must be configured.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Anomaly detection can be enabled on which one of the following?

A. Entity

B. Service

C. KPI

D. Multi-KPI alert

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What is the minimum number of entities a KPI must be split by in order to use Entity Cohesion anomaly detection?

A. 4

B. 3

C. 5

D. 2

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which of the following are characteristics of ITSI service dependencies? (select all that apply)

A. Impactful dependent services should only be configured to one primary service to avoid false negatives in Multi KPI Alerts.

B. Setting the dependent service KPI importance level will be treated as any other KPI in the primary service's health score.

C. It is best practice to use the dependent service's built-in 'ServiceHealthScore' KPI to reflect impact to the primary service.

D. If a primary service has a dependent service KPI and the KPI's importance level is changed, the dependency is broken.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

In a distributed deployment, the ITSI SA-IndexCreation should get installed on which of the following Splunk instance types?

A. Indexers and search heads

B. Search heads, indexers, and heavy forwarders

C. Indexers and forwarders

D. Search heads, indexers, and universal forwarders

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which of the following are characteristics of service templates? (select all that apply)

A. Service templates contain domain specific dashboards and deep dives.

B. Service templates can contain specific or generic entity rules.

C. Service templates can be modified after services are instantiated from it.

D. Service templates contain KPIs and KPI thresholds.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which of the following is a recommended best practice for service and glass table design?

A. Start with base searches, then services, and then glass tables.

B. Always use the standard icons for glass table widgets to improve portability.

C. Plan and implement services first, then build detailed glass tables.

D. Design glass tables first to discover which KPIs are important.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Splunk IT Service Intelligence Certified Admin (SPLK-3002) Free Practice Test