SPLK-3002 Itsi Practice Questions
The free SPLK-3002: Splunk IT Service Intelligence Certified Admin questions that deal with itsi, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #1
There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other's services. What are the role configuration steps required to accomplish this?
Correct answer: C
Explanation
C is the correct answer because teams are a feature of ITSI that allow you to restrict access to service content in UI views based on user roles. To create separate teams for finance and sales analysts, you need to create custom roles that inherit from the itoa_analyst role, which has read-only access to ITSI content. For example, you can create itoa_finance_analyst and itoa_sales_analyst roles that inherit from itoa_analyst. Then, you need to create custom teams that include these roles and assign them to the relevant services. For example, you can create a finance team that includes the itoa_finance_analyst role and assign it to the finance services. Similarly, you can create a sales team that includes the itoa_sales_analyst role and assign it to the sales services. This way, analysts in each department can only see their own services and not each other's. References: Create teams in ITSI, Assign teams to services in ITSI
Question #8
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
Correct answer: B
Explanation
Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/MKA A best practice for identifying the most effective services with which to start an iterative ITSI deployment is to analyze the business to determine the most critical services that have the most impact on revenue, customer satisfaction, or other key performance indicators. You can use the Service Analyzer to prioritize and monitor these services. References: Service Analyzer
Question #9
Which of the following describes a realistic troubleshooting workflow in ITSI?
Correct answer: B
Explanation
A realistic troubleshooting workflow in ITSI is: • B. Service Analyzer –> Notable Event Review –> Deep Dive This workflow involves using the Service Analyzer dashboard to monitor the health and performance of your services and KPIs, using the Notable Event Review dashboard to investigate and manage the notable events generated by ITSI, and using the Deep Dive dashboard to analyze the historical trends and anomalies of your KPIs and metrics. The other workflows are not realistic because they involve components that are not part of the troubleshooting process, such as correlation search, aggregation policy, and KPI.These components are used to create and configure the alerts and episodes that ITSI generates, not to investigate and resolve them. References: [Service Analyzer dashboard in ITSI], Overview of Episode Review in ITSI, [Overview of deep dives in ITSI]
Continue with SPLK-3002: Splunk IT Service Intelligence Certified Admin
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SPLK-3002: Splunk IT Service Intelligence Certified Admin, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All SPLK-3002: Splunk IT Service Intelligence Certified Admin practice questions →