Peer Offline and Decommission SPLK-2002 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   After a peer is decommissioned, how does the cluster ensure that replicated buckets are rebalanced?

   • AThe cluster stops replicating new data until the administrator manually rebalances.
   • BThe remaining peers automatically share buckets with each other without master involvement.
   • CThe master manually reassigns buckets to peers based on administrator input.
   • DThe master automatically redistributes buckets among the remaining peers to maintain balance and replication.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An administrator is decommissioning a peer and wants to ensure that the decommissioning process does not impact search availability. What should the administrator do before initiating the decommission?

   • AVerify that the cluster has enough healthy peers to maintain the search_factor for all buckets.
   • BStop the peer's search service to prevent it from serving search requests during the process.
   • CIncrease the replication_factor to ensure more copies of data are available.
   • DManually copy all buckets from the peer to the master before decommissioning.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A peer indexer has been marked down by the master. The administrator is considering whether to wait for the peer to return or decommission it. What is the key factor that should influence this decision?

   • AThe master's current load and available resources.
   • BThe expected duration of the outage and whether the peer can be repaired.
   • CThe current replication_factor and search_factor settings.
   • DThe number of buckets on the peer and their size.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After decommissioning a peer in a cluster with replication_factor=3, the master begins rebalancing buckets. What is the primary goal of this rebalancing process?

   • ATo ensure that all buckets from the decommissioned peer are copied to the remaining peers to maintain the replication factor.
   • BTo redistribute buckets evenly across all peers, including the decommissioned peer, to balance the load.
   • CTo delete all buckets from the decommissioned peer to free up storage space on the remaining peers.
   • DTo move buckets from the decommissioned peer to the master for centralized storage.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Splunk architect notices that a peer indexer in a 6-node cluster has stopped sending heartbeats to the master. The master has marked the peer as down. Which immediate action should the architect take to minimize the impact on search and replication while the peer is being investigated?

   • ARun `splunk show cluster-bucket -count` on the master to check for bucket replication violations.
   • BImmediately run `splunk decommission peer <peer_name>` to remove the peer from the cluster and trigger rebalancing.
   • CVerify the peer's status with `splunk show peer-status` and check the master's `_cluster` log for the reason it was marked down.
   • DRestart the master node to force a fresh heartbeat from all peers and re-establish the cluster.
   Reveal Solution Discussion Select an answer first