An administrator needs to transfer captaincy from SHC1 to SHC2. They run the command from SHC1, but it fails with an error. What is the most likely cause?

SHC2 is not a member of the cluster.

SHC1 is not the current captain.

The administrator does not have permission to run the command.

The cluster has less than 3 members.

A search head cluster is experiencing performance issues. The administrator suspects the captain is overloaded and wants to move the captaincy to a less busy member. What is the primary reason for performing a manual captaincy transfer in this scenario?

To permanently disable the current captain from the cluster.

To increase the replication factor of the cluster's configuration bundle.

To force all search head cluster members to reboot and refresh their configurations.

To balance the load across cluster members by moving the captaincy to a less utilized search head.

After a manual captaincy transfer, an administrator runs `splunk show shcluster-status` and sees that the `captain` field still shows the old captain's name. What is the most likely reason for this?

The new captain has not yet been elected.

The transfer command was run from a non-captain member and was rejected.

The transfer was successful, but the status command always shows the original captain.

The status command is cached and takes 5 minutes to update.

What must an administrator specify when manually transferring captaincy to a specific search head?

The management port of the cluster

The replication factor of the cluster

The member URI of the target search head

The IP address of the current captain

SplunkEnterprise Certified Architect

Domain 4Objective 4

Captaincy Transfer SPLK-2002 Practice Questions (Page 5)

Part of the Search Head Clustering and KV Store domain, which makes up ~19% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

Questions 21–24

21application · medium
An administrator needs to transfer captaincy from SHC1 to SHC2. They run the command from SHC1, but it fails with an error. What is the most likely cause?
Select an answer first
22application · medium
A search head cluster is experiencing performance issues. The administrator suspects the captain is overloaded and wants to move the captaincy to a less busy member. What is the primary reason for performing a manual captaincy transfer in this scenario?
Select an answer first
23application · medium
After a manual captaincy transfer, an administrator runs `splunk show shcluster-status` and sees that the `captain` field still shows the old captain's name. What is the most likely reason for this?
Select an answer first
24foundation · easy
What must an administrator specify when manually transferring captaincy to a specific search head?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.