Peer Offline and Decommission SPLK-2002 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   After decommissioning a peer, the cluster begins rebalancing. What is the primary mechanism the cluster uses to ensure data availability during the rebalance?

   • AThe cluster moves buckets to the master for temporary storage during the rebalance.
   • BThe cluster deletes buckets from the decommissioned peer and relies on the search_factor for availability.
   • CThe cluster pauses indexing until the rebalance is complete to avoid conflicts.
   • DThe cluster copies buckets from the decommissioned peer to other peers before removing them.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A peer indexer has been marked down by the master. The cluster has replication_factor=3 and search_factor=2. The administrator wants to minimize the impact on search while the peer is down. What is the best approach?

   • AWait for the cluster to rebalance and copy buckets to other peers to restore search_factor.
   • BReduce the search_factor to 1 to allow searches to complete with fewer copies.
   • CManually copy buckets from the downed peer to other peers using `splunk copy`.
   • DRestart the downed peer to force it to rejoin and restore search availability.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A peer indexer has been offline for 2 hours. The master has marked it as down. The administrator expects the peer to return after a network switch replacement. What is the key difference in the cluster's behavior between this state and a decommissioned peer?

   • AA downed peer triggers an immediate rebalance, while a decommissioned peer waits for the next maintenance window.
   • BThe cluster stops indexing new data when a peer is down, but continues indexing when a peer is decommissioned.
   • CThe downed peer's buckets are not rebalanced, while a decommissioned peer's buckets are migrated to other peers.
   • DThe downed peer is permanently removed from the cluster configuration, while a decommissioned peer can be re-added.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When a peer goes offline in an indexer cluster, what is the immediate impact on search?

   • ASearches are paused until the cluster rebalances the buckets.
   • BSearches fail entirely until the peer comes back online.
   • CSearches continue but may return incomplete results for data that was only on the offline peer.
   • DSearches are automatically redirected to the master for processing.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In an indexer cluster, what is the primary mechanism by which the master determines that a peer has gone offline?

   • AThe master checks the peer's replication port every few seconds using a TCP handshake.
   • BThe master waits for the peer to report its own failure through a syslog message.
   • CThe peer sends a shutdown notification to the master before going offline.
   • DThe master continuously pings each peer and marks it offline if no response is received within a configured timeout.
   Reveal Solution Discussion Select an answer first