A cluster peer is not receiving an app that was added to the master app bundle. What is the most likely first step to diagnose this issue?

Check the peer's local apps directory to see if the app was installed manually

Check the peer's replication port to ensure it is open

Restart the cluster master to force a new bundle distribution

Verify that the app is present in the master-apps directory and that the bundle was applied successfully

An administrator is creating a master app bundle that includes a custom search command. The search command requires a Python script. Where should the script be placed?

Directly in the master-apps directory.

In the lookups directory of the app.

In the bin directory of the app.

In the default directory of the app.

After applying a new master app bundle, an administrator notices that a custom search command is failing on some peers but not others. The bundle was applied successfully to all peers. What is the most likely cause?

The peers have different versions of Splunk.

The app conflicts with a local app on those peers.

The bundle was not applied to those peers.

The search command is not compatible with the peer's operating system.

An administrator is adding a new peer to an indexer cluster. The cluster has a master app bundle. What should the administrator do to ensure the new peer has the correct apps?

Nothing; the master will automatically send the bundle to the new peer.

Manually copy the bundle to the new peer.

Restart the master to trigger the bundle push.

Create a new bundle after the peer joins.

A company runs an indexer cluster with peers in multiple data centers. They need to deploy a custom index-time field extraction configuration to all peers. What is the recommended method?

Use a configuration management tool to push the file to each peer.

Manually edit props.conf on each peer.

Place the configuration in the cluster master's own props.conf.

Add the configuration to an app in the master-apps directory and create a new bundle.

SplunkEnterprise Certified Architect

Domain 3Objective 7

Master App Bundles SPLK-2002 Practice Questions (Page 3)

Part of the Indexer Clustering domain, which makes up ~25% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–15 in this domain), expect 1–2 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

Questions 11–15

11foundation · easy
A cluster peer is not receiving an app that was added to the master app bundle. What is the most likely first step to diagnose this issue?
Select an answer first
12application · medium
An administrator is creating a master app bundle that includes a custom search command. The search command requires a Python script. Where should the script be placed?
Select an answer first
13expert · hard
After applying a new master app bundle, an administrator notices that a custom search command is failing on some peers but not others. The bundle was applied successfully to all peers. What is the most likely cause?
Select an answer first
14application · medium
An administrator is adding a new peer to an indexer cluster. The cluster has a master app bundle. What should the administrator do to ensure the new peer has the correct apps?
Select an answer first
15application · medium
A company runs an indexer cluster with peers in multiple data centers. They need to deploy a custom index-time field extraction configuration to all peers. What is the recommended method?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.