A search head cluster member is unable to join the cluster. Which of the following is a common cause?

The member's server.conf has an incorrect list of peer members

The member's web.conf is misconfigured

The member is running a different version of Splunk than the deployer

The member has too many apps installed

A search head cluster has three members. One member becomes unresponsive and is removed from the cluster. The remaining members continue to serve search requests. What is the immediate impact on the cluster's search capacity and how should the administrator respond?

Search capacity is reduced, but the cluster remains operational. The administrator should monitor the cluster and replace the failed member as soon as possible.

The captain automatically fails over to another member, and search capacity is unaffected.

The cluster stops serving search requests until the failed member is restored.

The cluster automatically provisions a new member to replace the failed one, so no action is needed.

What is the recommended way to monitor the health of a search head cluster in Splunk?

Run 'splunk list shcluster-members'

Review the search head's web.conf

A consultant is setting up a new search head cluster. The cluster will have three members. The consultant needs to configure the deployer. What is the correct way to initialize the deployer?

Run `splunk bootstrap shcluster -auth admin:pass` on the deployer.

Run `splunk init cluster-config -auth admin:pass` on the deployer.

Run `splunk enable shcluster -auth admin:pass` on the deployer.

Run `splunk init shcluster-config -auth admin:pass` on the deployer.

SplunkCore Certified Consultant

Domain 9Objective 1

Articulate How to Manage and Deploy a Search Head Cluster CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Part of the Search Head Clustering domain, which accounts for 10% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

10%of the exam

Questions 16–20

16foundation · easy
A search head cluster member is unable to join the cluster. Which of the following is a common cause?
Select an answer first
17application · medium
A search head cluster has three members. One member becomes unresponsive and is removed from the cluster. The remaining members continue to serve search requests. What is the immediate impact on the cluster's search capacity and how should the administrator respond?
Select an answer first
18foundation · easy
What is the recommended way to monitor the health of a search head cluster in Splunk?
Select an answer first
19application · medium
A consultant is setting up a new search head cluster. The cluster will have three members. The consultant needs to configure the deployer. What is the correct way to initialize the deployer?
Select an answer first
20foundation · easy
When configuring a search head cluster, which file on each member is used to specify the list of peer members and the replication factor?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.