A Splunk indexer cluster has 6 peers, replication_factor=3, search_factor=2. The master is configured with a heartbeat timeout of 60 seconds. A peer experiences a network partition for 90 seconds, then recovers. The master marks the peer as down during the partition. What is the most likely sequence of events after the peer recovers?

The cluster will remain degraded until the peer is manually removed.

The peer rejoins the cluster, and the master updates the bucket catalog to reflect the peer's return.

The peer is permanently removed from the cluster and must be re-added manually.

The master will restart the peer to ensure it is healthy.

A Splunk indexer cluster has 4 peers, replication_factor=3, search_factor=2. One peer fails and is removed. The remaining 3 peers have enough storage to hold all buckets. After rebalancing, the cluster is still degraded. What is the most likely reason?

The search factor cannot be met because there are only 3 peers.

The master is not able to rebalance because it is in a degraded state.

The replication factor is now 3, but the cluster cannot store 3 copies because the peers are full.

The replication factor cannot be met because there are only 3 peers, and one of them may not have a copy of every bucket due to the rebalance strategy.

What is the purpose of bucket restoration in an indexer cluster?

To ensure that the required number of copies of each bucket exists across peers.

To move buckets from hot to cold storage.

To restore buckets from backup to the master.

To recreate buckets that were deleted by the search factor.

SplunkCore Certified Consultant

Domain 8Objective 3

Determine Failure Modes and Recovery Processes CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Part of the Indexer Clustering domain, which accounts for 18% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

7concepts

18%of the exam

Questions 16–20

16foundation · easy
Which cluster state indicates that the cluster is fully operational and all factors are met?
Select an answer first
17application · medium
An administrator needs to remove a peer from a Splunk indexer cluster that is permanently down. What is the correct command to run on the master?
Select an answer first
18expert · hard
A Splunk indexer cluster has 6 peers, replication_factor=3, search_factor=2. The master is configured with a heartbeat timeout of 60 seconds. A peer experiences a network partition for 90 seconds, then recovers. The master marks the peer as down during the partition. What is the most likely sequence of events after the peer recovers?
Select an answer first
19expert · hard
A Splunk indexer cluster has 4 peers, replication_factor=3, search_factor=2. One peer fails and is removed. The remaining 3 peers have enough storage to hold all buckets. After rebalancing, the cluster is still degraded. What is the most likely reason?
Select an answer first
20foundation · easy
What is the purpose of bucket restoration in an indexer cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Determine Failure Modes and Recovery Processes CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Questions 16–20

Which cluster state indicates that the cluster is fully operational and all factors are met?

An administrator needs to remove a peer from a Splunk indexer cluster that is permanently down. What is the correct command to run on the master?

A Splunk indexer cluster has 4 peers, replication_factor=3, search_factor=2. One peer fails and is removed. The remaining 3 peers have enough storage to hold all buckets. After rebalancing, the cluster is still degraded. What is the most likely reason?

What is the purpose of bucket restoration in an indexer cluster?

Keep studying — Indexer Clustering