Splunk SOAR Certified Automation Developer — Question 8

Which of the following applies when configuring time policies for KPI thresholds?

Answer options

• A. A person can only configure 24 policies, one for each hour of the day.
• B. They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00
• C. If a person expects a KPI to change significantly through a cycle on a daily basis, don’t use it.
• D. It is possible for multiple time policies to overlap.

Correct answer: B

Explanation

Option B is correct because time policies are specifically designed to account for variations in normal behavior during different times of the day. Option A is incorrect as there is no limit of 24 policies, option C is wrong because daily changes in KPIs can be effectively managed with time policies, and option D is inaccurate since overlapping can lead to conflicts in policy execution.