Explain the Difference Between High Availability and Disaster Recovery and How Both Can Be Addressed in Splunk CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement best contrasts the typical timeframes associated with high availability (HA) and disaster recovery (DR)?

   • AHA aims for near-zero downtime, while DR aims to restore service within hours or days
   • BHA and DR both aim for near-zero downtime
   • CHA aims to restore service within days, while DR aims for near-zero downtime
   • DHA and DR both aim to restore service within days
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does the scope of a failure addressed by high availability (HA) typically differ from that addressed by disaster recovery (DR)?

   • AHA addresses data corruption, while DR addresses data loss
   • BHA addresses software bugs, while DR addresses hardware failures
   • CHA addresses planned maintenance, while DR addresses unplanned outages
   • DHA addresses localized component failures, while DR addresses large-scale site or regional disasters
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A Splunk deployment has a search head cluster with three members. One member fails during a search. What happens to the user's search session?

   • AThe search continues on the failed search head after it restarts.
   • BThe session is automatically transferred to another search head in the cluster.
   • CThe user's search results are lost and cannot be recovered.
   • DThe user must log in again and rerun the search.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A company requires that its Splunk environment remain searchable even if an entire data center is destroyed. Which approach best meets this requirement?

   • ADeploy multi-site indexer clustering with replicas in a second data center
   • BDeploy a single-site indexer cluster with multiple peers
   • CConfigure forwarders to send data to two independent indexers
   • DUse a single indexer with a large storage array
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is deciding between investing in high availability or disaster recovery for their Splunk deployment. They can only afford one initiative this year. Which factor should most influence their decision?

   • AThe preferred programming language of the development team.
   • BThe number of users who access Splunk daily.
   • CThe maximum acceptable downtime for a single component failure versus a full site loss.
   • DThe version of Splunk Enterprise being used.
   Reveal Solution Discussion Select an answer first