A global organization requires that Splunk remain operational even if an entire data center is destroyed. They have a two-site deployment and can tolerate a recovery time objective (RTO) of 15 minutes. Which strategy best meets this requirement?

Deploy a single indexer cluster stretched across both sites with synchronous replication.

Implement multi-site indexer clustering with the primary site handling search and the secondary site on standby.

Use indexer clustering within each site and rely on manual DNS changes to redirect traffic.

Perform nightly backups of the indexers and ship them to the secondary site.

Which two metrics are most commonly used to define the goals of a disaster recovery plan?

Mean Time Between Failures (MTBF) and Mean Time To Repair (MTTR)

Recovery Time Objective (RTO) and Recovery Point Objective (RPO)

Service Level Agreement (SLA) and Service Level Objective (SLO)

A Splunk deployment has a single indexer that is experiencing frequent hardware failures. The company wants to minimize downtime for data ingestion. Which solution should they implement?

Schedule nightly backups of the indexer.

Use a load balancer in front of the single indexer.

Increase the size of the existing indexer's storage.

Add additional indexers and configure indexer clustering.

What is the primary objective of disaster recovery (DR) planning?

To restore IT operations and data access to an acceptable level after a major disruptive event

To prevent any single point of failure from causing a service interruption

To monitor system performance and alert administrators of potential issues

To continuously replicate all data to a secondary site with zero data loss

What is the primary goal of high availability (HA) in an IT system?

To restore full operations after a catastrophic event such as a data center loss

To reduce the cost of hardware by consolidating workloads onto fewer servers

To minimize the duration of unplanned downtime by ensuring continuous service availability

To ensure that all data is backed up to an offsite location on a nightly basis

SplunkCore Certified Consultant

Domain 1Objective 3

Explain the Difference Between High Availability and Disaster Recovery and How Both Can Be Addressed in Splunk CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Part of the Deploying Splunk domain, which accounts for 5% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

5%of the exam

Questions 11–15

11application · medium
A global organization requires that Splunk remain operational even if an entire data center is destroyed. They have a two-site deployment and can tolerate a recovery time objective (RTO) of 15 minutes. Which strategy best meets this requirement?
Select an answer first
12foundation · easy
Which two metrics are most commonly used to define the goals of a disaster recovery plan?
Select an answer first
13application · medium
A Splunk deployment has a single indexer that is experiencing frequent hardware failures. The company wants to minimize downtime for data ingestion. Which solution should they implement?
Select an answer first
14foundation · easy
What is the primary objective of disaster recovery (DR) planning?
Select an answer first
15foundation · easy
What is the primary goal of high availability (HA) in an IT system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.