EMT Practice Test

1. Question Content...

---

Question1: What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)

Question2: What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

Question3: ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?

Question4: Which of the following items apply to anomaly detection? (Choose all that apply.)

Question5: For which ITSI function is it a best practice to use a 15-30 minute time buffer?

Question6: Which of the following is a good use case regarding defining entities for a service?

Question7: Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)

Question8: After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?

Question9: Which of the following best describes a default deep dive?

Question10: In Episode Review, what is the result of clicking an episode's Acknowledge button?

Question11: Which of the following describes enabling smart mode for an aggregation policy?

Question12: Anomaly detection can be enabled on which one of the following?

Question13: Which of the following is a valid type of Multi-KPI Alert?

Question14: Which deep dive swim lane type does not require writing SPL?

Question15: Which of the following are the default ports that must be configured on Splunk to use ITSI?

Question16: Which capabilities are enabled through "teams"?

Question17: When in maintenance mode, which of the following is accurate?

Question18: What is the default importance value for dependent services' health scores?