Splunk Splunk Certifications SPLK-3002 Questions & Answers

• Question 51:

  When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?

  A. Gray

  B. Purple

  C. Gear Icon

  D. Blue

  Correct Answer: A

  Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.

  Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/AboutMW

• Question 52:

  After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?

  A. 6 months.

  B. 9 months.

  C. 1 year.

  D. 3 months.

  Correct Answer: A

  By default, notable event metadata is archived after six months to keep the KV store from growing too large.

  Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/TrimNECollections

• Question 53:

  Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?

  A. Only include KPIs if they will be used in multiple services.

  B. Analyze the business to determine the most critical services.

  C. Focus on low-level services.

  D. Define a large number of key services early.

  Correct Answer: A

  Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/MKA