Splunk SOAR Certified Automation Developer — Question 23

Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

Answer options

• A. A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
• B. ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.
• C. kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
• D. ITSI backups are stored as a collection of JSON formatted files.

Correct answer: C, D

Explanation

Option C is correct because kvstore_to_json.py is specifically designed to facilitate ITSI backups through scripts or command line. Option D is also correct as it accurately describes the storage format of ITSI backups. Options A and B are incorrect; they either misrepresent the capabilities of the ITSI backup job or do not specify the correct components included in the backup.