What event triggers a search head cluster member to start a new captain election?

The election timeout expires without receiving a heartbeat from the captain

Receiving a heartbeat from the captain

The member detects a network partition

The member receives a configuration update from the captain

A Splunk search head cluster has 5 members. A candidate requests votes with term 4. One follower has already voted for a different candidate in term 3. How does the follower respond to the term 4 request?

It grants the vote only if the candidate's log is at least as up-to-date as its own.

It denies the vote because the candidate's term is not exactly one higher than the previous term.

It grants its vote to the term 4 candidate because the term is higher than the term 3 election it already voted in.

It denies the vote because it has already voted in this election cycle and cannot vote again.

What happens when the captain of a search head cluster fails?

The cluster becomes read-only until the captain is restored

The cluster shuts down to prevent data loss

A new election is triggered, and a new captain is elected from the remaining members

The search head with the highest uptime automatically becomes the new captain

A Splunk search head cluster has 5 members. The captain fails. An election is held, and candidate A receives votes from 3 members. Candidate B receives votes from 2 members. What is the result?

Candidate A becomes the new captain because it received a majority of 3 votes.

No captain is elected because the votes are split between A and B.

Candidate B becomes the new captain because it has the highest term.

A runoff election is held between A and B to determine the winner.

SplunkCore Certified Consultant

Domain 9Objective 5

Articulate How Captain Election Works (RAFT) CORE-CERTIFIED-CONSULTANT Practice Questions (Page 2)

Part of the Search Head Clustering domain, which accounts for 10% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

10%of the exam

Questions 6–10

6foundation · easy
What event triggers a search head cluster member to start a new captain election?
Select an answer first
7application · medium
A Splunk search head cluster has 5 members. A candidate requests votes with term 4. One follower has already voted for a different candidate in term 3. How does the follower respond to the term 4 request?
Select an answer first
8foundation · easy
In RAFT, which role is held by a search head cluster member that has not recently received a heartbeat from the captain?
Select an answer first
9foundation · easy
What happens when the captain of a search head cluster fails?
Select an answer first
10application · easy
A Splunk search head cluster has 5 members. The captain fails. An election is held, and candidate A receives votes from 3 members. Candidate B receives votes from 2 members. What is the result?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.