An organization has an indexer cluster and wants to ensure that all peers have the same set of custom lookup files. The administrator updates the lookup files in the master-apps directory. What must be done to propagate the changes?

Copy the lookup files to each peer's lookups directory.

Restart all peers to pick up the changes.

Use the deployer to push the files.

Create a new bundle by running 'splunk apply cluster-bundle'.

An administrator is about to apply a new master app bundle. What is the expected impact on the cluster?

Only the master will restart, and peers will continue running.

All peers will restart, causing a brief interruption in indexing.

There will be no impact on indexing because peers apply the bundle without restarting.

The cluster will become unavailable for a long period.

Which statement correctly describes the role of master app bundles in an indexer cluster?

They allow peers to send their local app configurations to the master for centralized management

They are used to replicate raw data from the master to peers for backup purposes

They are used only for distributing search head apps, not indexer apps

They provide a way to install apps on peers without requiring manual intervention on each peer

An administrator is creating a master app bundle for the first time. They have placed an app directory in the master-apps directory. What is the next step to make the bundle available to peers?

Restart the cluster master to trigger bundle creation.

Wait for the next scheduled bundle push.

Run the 'splunk apply cluster-bundle' command on the cluster master.

Copy the app to each peer manually.

An administrator is troubleshooting an issue where a custom lookup file is not available on any peer, even though it was added to the master app bundle. The bundle was created successfully and peers report that they have the latest version. What is the most likely cause?

The master did not include the lookup file because it was not in the master-apps directory.

The lookup file is too large for the bundle.

The lookup file was placed in the wrong directory within the app.

The peers did not restart after receiving the bundle.

SplunkEnterprise Certified Architect

Domain 3Objective 7

Master App Bundles SPLK-2002 Practice Questions (Page 2)

Part of the Indexer Clustering domain, which makes up ~25% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–15 in this domain), expect 1–2 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

Questions 6–10

6application · medium
An organization has an indexer cluster and wants to ensure that all peers have the same set of custom lookup files. The administrator updates the lookup files in the master-apps directory. What must be done to propagate the changes?
Select an answer first
7application · medium
An administrator is about to apply a new master app bundle. What is the expected impact on the cluster?
Select an answer first
8foundation · easy
Which statement correctly describes the role of master app bundles in an indexer cluster?
Select an answer first
9application · medium
An administrator is creating a master app bundle for the first time. They have placed an app directory in the master-apps directory. What is the next step to make the bundle available to peers?
Select an answer first
10expert · hard
An administrator is troubleshooting an issue where a custom lookup file is not available on any peer, even though it was added to the master app bundle. The bundle was created successfully and peers report that they have the latest version. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.