SPLK-3002試験問題でリアルに更新された問題PDF
合格させる無料保証付きクイズ2022年最新の実際に出ると確認されたSplunk
Splunk SPLK-3002 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
| トピック 9 |
|
| トピック 10 |
|
| トピック 11 |
|
| トピック 12 |
|
| トピック 13 |
|
| トピック 14 |
|
質問 17
Which of the following is the best use case for configuring a Multi-KPI Alert?
- A. Using machine learning to evaluate when data falls outside of an expected pattern.
- B. Raising an alert when one or more KPIs indicate an outage is occurring.
- C. Comparing anomaly detection between two KPIs.
- D. Comparing content between two notable events.
正解: D
質問 18
Which of the following are the default ports that must be configured on Splunk to use ITSI?
- A. SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)
- B. SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)
- C. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)
- D. SplunkWeb (8088), SplunkD (8089), and HTTP Collector (8000)
正解: C
質問 19
Which of the following describes a realistic troubleshooting workflow in ITSI?
- A. Service Analyzer -> Aggregation Policy -> Deep Dive
- B. Correlation Search -> Deep Dive -> Notable Event
- C. Service Analyzer -> Notable Event Review -> Deep Dive
- D. Correlation search -> KPI -> Aggregation Policy
正解: B
質問 20
Which capabilities are enabled through "teams"?
- A. Teams allow searches against the itsi_summary index.
- B. Teams restrict notable event alert actions.
- C. Teams allow restrictions to service content in UI views.
- D. Teams restrict searches against the itsi_notable_audit index.
正解: A
解説:
Explanation
Teams provide presentation-layer security only and not data-level security. It's still possible for a user with access to the Splunk search bar to look up ITSI summary index data.
質問 21
Which of the following describes entities? (Choose all that apply.)
- A. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
- B. Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
- C. Multiple entities can share the same alias value, but must have different role values.
- D. To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".
正解: D
質問 22
How do you automatically restrict a KPI to only the entities in its service, and generate KPI values for each entity?
- A. Select "Yes" for both "Split by Entity" and "Filter to Entities in Service".
- B. Select "No" for "Split by Entity" and "Yes" for "Filter to Entities in Service".
- C. Select "Yes" for "Split by Entity" and "No" for "Filter to Entities in Service".
- D. Select "No" for both "Split by Entity" and "Filter to Entities in Service".
正解: A
質問 23
Which of the following is a good use case regarding defining entities for a service?
- A. KPI total values are aggregated from multiple different category values in the source events.
- B. Automatically associate entities to services using multiple entity aliases.
- C. All of the entities have the same identifying field name.
- D. Being able to split a CPU usage KPI by host name.
正解: B
解説:
Explanation
Define entities before creating services. When you configure a service, you can specify entity matching rules based on entity aliases that automatically add the entities to your service.
質問 24
When installing ITSI to support a Distributed Search Architecture, which of the following items apply?
(Choose all that apply.)
- A. Copy SA-IndexCreation to all indexers.
- B. Extract installer package into etc/apps directory of the cluster deployer node.
- C. Extract ITSI app package into etc/apps directory of search head.
- D. Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.
正解: A
解説:
Explanation
Copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on all individual indexers in your environment.
質問 25
Anomaly detection can be enabled on which one of the following?
- A. Service
- B. Entity
- C. Multi-KPI alert
- D. KPI
正解: D
解説:
Explanation
Enable anomaly detection to identify trends and outliers in KPI search results that might indicate an issue with your system.
質問 26
When must a service define entity rules?
- A. If the intention is for the KPIs in the service to have different aggregate vs. entity KPI values.
- B. If the intention is for the KPIs in the service to filter to only entities assigned to the service.
- C. If some or all of the KPIs in the service will be split by entity.
- D. To enable entity cohesion anomaly detection.
正解: B
解説:
Explanation
Provide a value to filter the service to a specific set of entities. These entity rule values are meant to be custom for each service.
質問 27
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)
- A. Service swapping configuration.
- B. Correlation search creation.
- C. Creating glass tables.
- D. Adding KPI metric lanes to glass tables.
正解: A,C,D
解説:
Explanation
Create a glass table to visualize and monitor the interrelationships and dependencies across your IT and business services.
The service swapping settings are saved and apply the next time you open the glass table.
You can add metrics like KPIs, ad hoc searches, and service health scores that update in real time against a background that you design. Glass tables show real-time data generated by KPIs and services.
質問 28
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
- A. Gear Icon
- B. Purple
- C. Blue
- D. Gray
正解: D
解説:
Explanation
Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.
質問 29
What are valid considerations when designing an ITSI Service? (Choose all that apply.)
- A. Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.
- B. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
- C. Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.
- D. Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.
正解: B,D
質問 30
For which ITSI function is it a best practice to use a 15-30 minute time buffer?
- A. Correlation searches.
- B. Maintenance windows
- C. Anomaly detection.
- D. Adaptive thresholding.
正解: B
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 31
Which of the following is a best practice when configuring maintenance windows?
- A. Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
- B. Disable any glass tables that reference a KPI that is part of an open maintenance window.
- C. Change the color of services and entities that are part of an open maintenance window in the service analyzer.
- D. Develop a strategy for configuring a service's notable event generation when the service's maintenance window is open.
正解: A
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work.
質問 32
Which index contains ITSI Episodes?
- A. itsi_summary
- B. itsi_tracked_alerts
- C. itsi_grouped_alerts
- D. itsi_notable_archive
正解: D
質問 33
In distributed search, which components need to be installed on instances other than the search head?
- A. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
- B. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
- C. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.
- D. SA-ITSI-Licensechecker on indexers.
正解: C
解説:
Explanation
SA-IndexCreation is required on all indexers. For non-clustered, distributed environments, copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on individual indexers.
質問 34
Which of the following describes enabling smart mode for an aggregation policy?
- A. Edit the notable event view, enable smart mode, select "fields", and click "Save"
- B. Edit the aggregation policy, enable smart mode, select fields to analyze, click "Save"
- C. Configure -> Policies -> Smart Mode -> Enable, select "fields", click "Save"
- D. Enable grouping in Notable Event Review, select "Smart Mode", select "fields", and click "Save"
正解: C
解説:
Explanation
1. From the ITSI main menu, click Configuration > Notable Event Aggregation Policies.
2. Select a custom policy or the Default Policy.
3. Under Smart Mode grouping, enable Smart Mode.
4. Click Select fields. A dialog displays the fields found in your notable events from the last 24 hours.
質問 35
What is the main purpose of the service analyzer?
- A. Trigger external alerts based on threshold violations.
- B. Monitor overall Service and KPI status.
- C. Allow Analysts to add comments to Alerts.
- D. Display a list of All Services and Entities.
正解: C
質問 36
In maintenance mode, which features of KPIs still function?
- A. KPI calculations and threshold settings can be modified.
- B. KPI searches will execute but will be buffered until the maintenance window is over.
- C. New KPIs can be created, but existing KPIs are locked.
- D. KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.
正解: B
解説:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
質問 37
There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other's services. What are the role configuration steps required to accomplish this?
- A. itoa_finance_admin, inherited from itoa_team_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
- B. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
- C. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
- D. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_team_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
正解: B
質問 38
......
トップクラスのSPLK-3002練習試験問題：https://www.goshiken.com/Splunk/SPLK-3002-mondaishu.html
無料Splunk IT Service SPLK-3002究極の学習ガイド：https://drive.google.com/open?id=1Qnthw89-m54ca0wgz7FPEK8QyfvpSJJb