SPLK-3002問題集、Splunk実際の試験問題

質問 1

Which of the following describes entities? (Choose all that apply.)

A. Multiple entities can share the same alias value, but must have different role values.

B. To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".

C. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.

D. Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

When working with a notable event group in the Notable Events Review dashboard, which of the following can be set at the individual or group level?

A. Severity, status, owner.

B. Severity, comments, service.

C. Service, status, owner.

D. Severity, status, service.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

When changing a service template, which of the following will be added to linked services by default?

A. Health score.

B. Thresholds.

C. New KPIs.

D. Entity Rules.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

What effects does the KPI importance weight of 11 have on the overall health score of a service?

A. At least 10% of the KPIs will go critical.

B. It is a minimum health indicator KPI.

C. Importance weight is unused for health scoring.

D. The service will go critical.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)

A. Comparing a service's notable events over a time period.

B. Examining and comparing alert levels for KPIs in a service over time.

C. Visualizing one or more Service KPIs values by time.

D. Comparing swim lane values for a slice of time.

正解: B,C,D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which of the following is a good use case regarding defining entities for a service?

A. KPI total values are aggregated from multiple different category values in the source events.

B. Being able to split a CPU usage KPI by host name.

C. All of the entities have the same identifying field name.

D. Automatically associate entities to services using multiple entity aliases.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which of the following is a good use case for a Multi-KPI alert?

A. Alerting when comparing the values of two or more KPIs indicates an unusual condition is occurring.

B. Alerting when the trend of two or more KPIs indicates service failure is imminent.

C. Alerting when two or more KPIs are deviating from their typical pattern.

D. Alerting when the values of two or more KPIs go into maintenance mode.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 8

In distributed search, which components need to be installed on instances other than the search head?

A. SA-ITSI-Licensechecker on indexers.

B. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.

C. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.

D. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 9

Which index contains ITSI Episodes?

A. itsi_tracked_alerts

B. itsi_summary

C. itsi_notable_archive

D. itsi_grouped_alerts

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which of the following actions can be performed with a deep dive?

A. Create a custom service analyzer from selected deep dive lanes.

B. Create a predictive analysis model from the deep dive to warn of future service degradation.

C. Create an anomaly detection alert to show when the same pattern begins in the future.

D. Create a Multi-KPI alert from the deep dive's current state to warn of similar situations in the future.

正解: D

解説: (PassTest メンバーにのみ表示されます)

Splunk IT Service Intelligence Certified Admin - SPLK-3002 模擬練習