A search head cluster has three members: A, B, and C. The captain is member A. Member A is shut down for maintenance. Members B and C elect member B as the new captain. When member A comes back online, what happens?

Member A becomes the captain again because it has the highest priority.

Member A initiates a new election because it was the previous captain.

Member A rejoins the cluster as a regular member and accepts the current captain.

Member A is rejected from the cluster because it was offline.

A search head cluster has three members: A, B, and C. The captain is member A. Member A loses network connectivity to both B and C, but B and C can still communicate with each other. What is the outcome for the cluster?

Member A remains the captain, and B and C are removed from the cluster.

The cluster becomes unavailable because the captain is isolated and cannot coordinate.

Members B and C elect a new captain and continue operating, while member A is isolated.

The cluster splits into two independent clusters, each with its own captain.

A search head cluster is configured with five members. A new search head is added to the cluster. What must the new member do before it can begin serving user searches?

It must be manually configured with the same apps and data inputs as the other members.

It must synchronize its configuration and knowledge objects from the captain.

It must be added to the indexer cluster's peer list to receive data.

It must wait for the next scheduled search to run to populate its local cache.

A search head cluster has five members. The current captain is being decommissioned for hardware refresh. The remaining members have varying resource capacities: two are high-CPU, two are standard, and one is low-CPU. The cluster needs to elect a new captain with minimal disruption. What factor most influences which member becomes the new captain?

The member with the lowest current load is elected to balance resources.

The member that has been in the cluster the longest is elected.

The member with the highest CPU capacity is automatically elected.

The election is randomized among all members that are currently up and in a healthy state.

Which of the following is a responsibility of a cluster member in a Splunk search head cluster?

Running searches on behalf of users

Storing the only copy of the cluster's search artifacts

Assigning search jobs to other members

Deciding which members are active in the cluster

SplunkCore Certified Consultant

Domain 9Objective 4

Describe the Role of the Cluster Members and the Captain CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Part of the Search Head Clustering domain, which accounts for 10% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

10%of the exam

Questions 11–15

11expert · medium
A search head cluster has three members: A, B, and C. The captain is member A. Member A is shut down for maintenance. Members B and C elect member B as the new captain. When member A comes back online, what happens?
Select an answer first
12expert · hard
A search head cluster has three members: A, B, and C. The captain is member A. Member A loses network connectivity to both B and C, but B and C can still communicate with each other. What is the outcome for the cluster?
Select an answer first
13application · medium
A search head cluster is configured with five members. A new search head is added to the cluster. What must the new member do before it can begin serving user searches?
Select an answer first
14application · medium
A search head cluster has five members. The current captain is being decommissioned for hardware refresh. The remaining members have varying resource capacities: two are high-CPU, two are standard, and one is low-CPU. The cluster needs to elect a new captain with minimal disruption. What factor most influences which member becomes the new captain?
Select an answer first
15foundation · easy
Which of the following is a responsibility of a cluster member in a Splunk search head cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.