An administrator has made a change to a configuration file on the master node that is part of the cluster bundle. After pushing the bundle, one peer fails to apply the new configuration. What is the MOST likely cause?

The peer has a different version of Splunk

The peer is down or unreachable from the master

The configuration file is invalid on that peer

The peer's replication port is not configured

A Splunk architect is configuring a search head to search a single-site indexer cluster. The search head has been installed and licensed. What configuration must be applied on the search head to enable it to search the cluster?

Add each peer node's URI to the search head's distsearch.conf as a search peer

Enable the search head cluster mode in server.conf

Set the search factor on the search head to match the cluster's search factor

Add the master node's URI to the search head's distsearch.conf as a cluster master

What must be configured on a search head to enable it to search across a single-site indexer cluster?

The cluster master's URI and the cluster label

A list of all peer node IP addresses

The replication port of each peer node

What does the search factor (sf) determine in a single-site indexer cluster?

The number of total copies of each bucket

The number of searchable copies of each bucket

The number of search heads allowed in the cluster

The number of peers that can be down without data loss

In a single-site indexer cluster, what is the primary role of a peer node?

To manage the cluster configuration bundle

To provide a single point of contact for external systems

To store and index data, including replicated buckets

To coordinate searches across the cluster

SplunkEnterprise Certified Architect

Domain 3Objective 1

Splunk Single-Site Indexer Cluster Configuration SPLK-2002 Practice Questions (Page 3)

Part of the Indexer Clustering domain, which makes up ~25% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–15 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

9concepts

Questions 11–15

11application · medium
An administrator has made a change to a configuration file on the master node that is part of the cluster bundle. After pushing the bundle, one peer fails to apply the new configuration. What is the MOST likely cause?
Select an answer first
12application · medium
A Splunk architect is configuring a search head to search a single-site indexer cluster. The search head has been installed and licensed. What configuration must be applied on the search head to enable it to search the cluster?
Select an answer first
13foundation · easy
What must be configured on a search head to enable it to search across a single-site indexer cluster?
Select an answer first
14foundation · easy
What does the search factor (sf) determine in a single-site indexer cluster?
Select an answer first
15foundation · easy
In a single-site indexer cluster, what is the primary role of a peer node?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.