What is the primary purpose of a rolling upgrade for an indexer cluster?

To upgrade all nodes simultaneously to reduce total upgrade time

To upgrade nodes one at a time while keeping the cluster available

To upgrade only the peers and leave the cluster master unchanged

To upgrade the cluster without needing to restart any services

When planning a migration of an existing indexer cluster to new hardware, which of the following is a key consideration that must be addressed before the migration begins?

Ensuring the new hardware has the same IP addresses as the old cluster nodes

Upgrading all search heads to the latest version before migrating the cluster

Verifying that the new environment meets the same or updated system requirements and that data is backed up

Deleting all existing indexes to ensure a clean start on the new hardware

A team is performing a rolling upgrade of a 6-node indexer cluster. After upgrading the cluster master and two peers, they discover a critical bug in the new version that causes search failures. The remaining four peers have not been upgraded. What is the best course of action?

Roll back the two upgraded peers to the previous version and keep the cluster master on the new version.

Roll back the cluster master and the two upgraded peers to the previous version, restoring the entire cluster to a consistent state.

Continue upgrading the remaining peers to complete the upgrade, then apply a hotfix.

Leave the upgraded peers as they are and wait for a hotfix from Splunk.

Which of the following is an essential step when migrating an indexer cluster to a new environment?

Reindexing all data from the original sources after the migration

Shutting down the old cluster permanently before starting the migration

Validating that the new cluster is healthy and searchable before decommissioning the old one

Changing the cluster name to avoid conflicts with the old environment

An administrator is performing a rolling upgrade of a 5-node indexer cluster. After upgrading the first peer, they run 'splunk show cluster-status' and see that the peer is listed as 'Down'. What should the administrator do next?

Check the peer's logs to determine why it is not rejoining the cluster, and resolve the issue before proceeding.

Roll back the entire cluster to the previous version.

Restart the peer and immediately proceed to the next peer.

Proceed to upgrade the next peer, as the status will update automatically.

SplunkEnterprise Certified Architect

Domain 3Objective 4

Cluster Migration and Upgrade Considerations SPLK-2002 Practice Questions (Page 1)

Part of the Indexer Clustering domain, which makes up ~25% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–15 in this domain), expect 1–2 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

6concepts

Questions 1–5

1foundation · easy
What is the primary purpose of a rolling upgrade for an indexer cluster?
Select an answer first
2foundation · easy
When planning a migration of an existing indexer cluster to new hardware, which of the following is a key consideration that must be addressed before the migration begins?
Select an answer first
3expert · hard
A team is performing a rolling upgrade of a 6-node indexer cluster. After upgrading the cluster master and two peers, they discover a critical bug in the new version that causes search failures. The remaining four peers have not been upgraded. What is the best course of action?
Select an answer first
4foundation · easy
Which of the following is an essential step when migrating an indexer cluster to a new environment?
Select an answer first
5application · medium
An administrator is performing a rolling upgrade of a 5-node indexer cluster. After upgrading the first peer, they run 'splunk show cluster-status' and see that the peer is listed as 'Down'. What should the administrator do next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.