Splunk SOAR Certified Automation Developer — Question 52

When must a service define entity rules?

Answer options

• A. If the intention is for the KPIs in the service to filter to only entities assigned to the service.
• B. To enable entity cohesion anomaly detection.
• C. If some or all of the KPIs in the service will be split by entity.
• D. If the intention is for the KPIs in the service to have different aggregate vs. entity KPI values.

Correct answer: A

Explanation

The correct answer A is essential because defining entity rules is necessary when KPIs should only pertain to specific entities assigned to the service. Options B, C, and D suggest scenarios that do not specifically require the definition of entity rules, making them incorrect in this context.