A search head cluster has 3 members. The captain (SHC1) becomes unresponsive. SHC2 and SHC3 are still up. What is the minimum number of members required to elect a new captain?

1 member (any single member can become captain).

2 members, but only if they are in the same data center.

2 members (a majority of the cluster).

3 members (all members must be up).

What is the impact of a captaincy transfer on scheduled searches in a search head cluster?

Scheduled searches may be briefly interrupted and then resume under the new captain

Scheduled searches continue without any interruption

Scheduled searches are permanently lost and must be recreated

Scheduled searches are migrated to the new captain immediately

In which scenario would an administrator most likely need to manually transfer captaincy?

When the search head cluster is being decommissioned permanently

When a new search head is added to the cluster for the first time

When the current captain is healthy but must be taken offline for hardware maintenance

When the captain has already failed and the cluster is without a captain

A search head cluster has 6 members. The captain (SHC1) loses power unexpectedly. The cluster elects SHC2 as the new captain. However, SHC1 comes back online 10 minutes later. What is the expected behavior of the cluster?

The cluster splits into two separate clusters, each with its own captain.

SHC1 automatically reclaims the captaincy because it was the original captain.

SHC1 is permanently removed from the cluster and must be re-added manually.

SHC2 remains the captain, and SHC1 rejoins as a regular member.

SplunkEnterprise Certified Architect

Domain 4Objective 4

Captaincy Transfer SPLK-2002 Practice Questions (Page 2)

Part of the Search Head Clustering and KV Store domain, which makes up ~19% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

Questions 6–10

6expert · hard
A search head cluster has 3 members. The captain (SHC1) becomes unresponsive. SHC2 and SHC3 are still up. What is the minimum number of members required to elect a new captain?
Select an answer first
7foundation · easy
Which command is used to verify the current captain of a search head cluster?
Select an answer first
8foundation · easy
What is the impact of a captaincy transfer on scheduled searches in a search head cluster?
Select an answer first
9foundation · easy
In which scenario would an administrator most likely need to manually transfer captaincy?
Select an answer first
10expert · medium
A search head cluster has 6 members. The captain (SHC1) loses power unexpectedly. The cluster elects SHC2 as the new captain. However, SHC1 comes back online 10 minutes later. What is the expected behavior of the cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.