Splunk IT Service Intelligence Certified Admin Exam Questions

Here you have the best Splunk SPLK-3002 practice exam questions.

Some things you may want to keep in mind about this practice exam questions:

You have 53 total questions to study from
Each page has 5 questions, making a total of 11 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on September 15, 2024

Question 1 of 53

After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?

A.

6 months.

B.

9 months.

C.

1 year.

D.

3 months.

Correct Answer: A

After a notable event has been closed, the meta data for that event will remain in the KV Store by default for 6 months.

Question 2 of 53

Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?

A.

Only include KPIs if they will be used in multiple services.

B.

Analyze the business to determine the most critical services.

C.

Focus on low-level services.

D.

Define a large number of key services early.

Correct Answer: B

The best practice for identifying the most effective services with which to start an iterative ITSI deployment is to analyze the business to determine the most critical services. This approach ensures that the deployment focuses on services that have the most significant impact on the business, thereby maximizing the value and effectiveness of the ITSI implementation.

Question 3 of 53

When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?

A.

Gray

B.

Purple

C.

Gear Icon

D.

Blue

Correct Answer: A

When creating a custom deep dive, services and KPIs in maintenance mode are displayed in gray within the topology view. This is done to visually differentiate them from other states and indicate that they are currently under maintenance.

Question 4 of 53

Which deep dive swim lane type does not require writing SPL?

A.

Event lane.

B.

Automatic lane.

C.

Metric lane.

D.

KPI lane.

Correct Answer: D

The KPI lane does not require writing SPL because it uses pre-configured service and KPI selections to generate the necessary data views. The other lanes such as Event and Metric typically require ad-hoc searches to be written, and there is no such lane as 'Automatic lane'.

Question 5 of 53

Which of the following items apply to anomaly detection? (Choose all that apply.)

A.

Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it’s magic.

B.

A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.

C.

Anomaly detection automatically generates notable events when KPI data diverges from the pattern.

D.

There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.

Correct Answer: BC

A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis, which is essential for ensuring there is enough data to identify anomalies reliably. Anomaly detection automatically generates notable events when KPI data diverges from the pattern, indicating unusual or unexpected behaviors that need attention.