Discuss Splunk SPLK-3002 Exam Topic 2 Question 32

Which of the following describes entities? (Choose all that apply.)

AEntities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.

BAn abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.

CMultiple entities can share the same alias value, but must have different role values.

DTo automatically restrict the KPI to only the entities in a particular service, select ''Filter to Entities in Service''.

Suggested Answer: D

Get Premium SPLK-3002 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Garry 11 months ago

I thought entities had to be unique, this is confusing.

Patti 11 months ago

Filtering to entities in service is a must for accurate KPIs!

Kimi 12 months ago

Wait, can multiple entities really share the same alias? Sounds off.

Fanny 12 months ago

Totally agree, that's a basic fact!

Stefania 12 months ago

Entities can be IT devices like routers and switches.

Scot 1 year ago

I definitely remember that filtering to entities in a service is important for KPIs, so I think option D is correct.

Donte 1 year ago

I feel like I’ve seen something about multiple entities sharing alias values, but I can't recall if they need different role values.

Erick 1 year ago

I think option B sounds familiar from our practice questions, but I’m a bit confused about the part regarding filtering.

Colton 1 year ago

I remember entities can be more than just IT devices, but I'm not sure if they must be identified by IP or MAC addresses.

Cherry 1 year ago

This looks like a tricky question. I'll need to think carefully about the different tools that can be used to hide one's identity online.

Pamella 1 year ago

Okay, let's see here. The metadata says the spatial reference is the same, but the data is off. My best guess is that the central meridian or latitude of origin in the metadata is incorrect. I'll need to investigate that further.

Freida 1 year ago

I've worked with Azure AD before, so I'm pretty confident I know the answer to this. I'll go with the option that seems most reasonable based on my experience.

Splunk SPLK-3002 Exam - Topic 2 Question 32 Discussion