Articulate How to Manage and Deploy a Search Head Cluster CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A search head cluster has three members. After a network partition, two members can communicate with each other but not with the third. The third member is still running and serving searches. What is the most likely outcome and what should the administrator do?

   • AThe third member will be automatically removed from the cluster, and the administrator should add a new member.
   • BThe cluster will automatically merge the partitions once the network is restored, and no action is needed.
   • CThe cluster will continue to operate normally because the captain is still running on the third member.
   • DThe two communicating members will elect a new captain, and the third member will be isolated. The administrator should restore network connectivity between all members.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A consultant is configuring a search head cluster. The consultant has initialized the deployer and now needs to bootstrap the members. What is the correct command to bootstrap a member?

   • A`splunk add shcluster-member -auth admin:pass`
   • B`splunk bootstrap shcluster -auth admin:pass -servers_list <deployer> -shcluster_label <label>`
   • C`splunk init shcluster-config -auth admin:pass`
   • D`splunk enable shcluster -auth admin:pass`
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Where must an app be placed on the deployer so that it is distributed to all search head cluster members?

   • A$SPLUNK_HOME/etc/apps
   • B$SPLUNK_HOME/etc/deployment-apps
   • C$SPLUNK_HOME/etc/system/local
   • D$SPLUNK_HOME/etc/shcluster/apps
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A consultant is designing a search head cluster for a customer. The customer wants to know the minimum number of members required for a functional cluster. What is the correct answer?

   • AFour members are required to ensure high availability.
   • BThree members are required for a functional search head cluster.
   • COne member is sufficient if the deployer is also configured.
   • DTwo members are sufficient for a functional cluster.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A consultant is explaining the architecture of a search head cluster to a customer. The customer asks: 'What happens if the captain fails?' What is the correct response?

   • AThe deployer takes over the captain's responsibilities.
   • BThe cluster stops serving searches until the captain is restored.
   • CThe cluster becomes read-only until a new captain is manually assigned.
   • DThe remaining members elect a new captain automatically.
   Reveal Solution Discussion Select an answer first