ARCHITECT EXAM 2025
ANSWER ALL QUESTIONS IN THIS SECTION
QUESTION 1
OOB, what ports do the peers communicate to?
Peers to master node? SH to Master node? forwarders to idxs? - ANSWERS-9100,
8089, 8089, 9997
QUESTION 2
What command configures master node? - ANSWERS-splunk edit cluster-config
-mode master
-replication_factor 2
-search_factor 2
-secret passwd (saved as pass4SymmKey)
QUESTION 3
What command configures the peer nodes? - ANSWERS-splunk enable listen
9997
splunk edit cluster-config
-mode slave
END OF
PAGE 1
, ARCHITECT EXAM 2025
-master_uri https://ip:8089
-secret passwd
-replication_port 9100
QUESTION 4
What command configures the SH's? - ANSWERS-splunk edit cluster-config
-mode searchhead
-master_uri https://ip:8089
-secret passwd
QUESTION 5
What is the difference between complete and valid? - ANSWERS-Complete
matches the number of copies in each bucket
Valid means at least one searchable bucket
QUESTION 6
What endpoint do cluster peers communicate? - ANSWERS-
/service/cluster/master (peer to master)
/service/cluster/slave (master to peer)
END OF
PAGE 2
, ARCHITECT EXAM 2025
QUESTION 7
To troubleshoot clustering issues, what components are in splunkd.log? -
ANSWERS-CM* or Cluster*, look for errors on Master
QUESTION 8
What happens when a cluster node fails? - ANSWERS-Continues to operate
data might not replicate
SH send queries to last known peers
after Master comes back online, buckets rebalanced
QUESTION 9
What happens when a Master node fails? - ANSWERS-Continues to operate
data might not replicate
SH send queries to last known peers
after Master comes back online, buckets rebalanced
END OF
PAGE 3
, ARCHITECT EXAM 2025
QUESTION 10
What can I run to add a non-clustered indexer to a cluster as a peer? Will old data
be replicated to the new peer? - ANSWERS-splunk edit cluster-config -mode slave
...
NO
QUESTION 11
What are the commands to configure a multisite master node? - ANSWERS-splunk
edit cluster-config
-mode master
-multisite true
-site site1
-available_sites site1, site2
-site_replication_factor origin1, total:2
-site_search_factor origin1, total:2
-secret passwd (saved as pass4SymmKey)
END OF
PAGE 4
ANSWER ALL QUESTIONS IN THIS SECTION
QUESTION 1
OOB, what ports do the peers communicate to?
Peers to master node? SH to Master node? forwarders to idxs? - ANSWERS-9100,
8089, 8089, 9997
QUESTION 2
What command configures master node? - ANSWERS-splunk edit cluster-config
-mode master
-replication_factor 2
-search_factor 2
-secret passwd (saved as pass4SymmKey)
QUESTION 3
What command configures the peer nodes? - ANSWERS-splunk enable listen
9997
splunk edit cluster-config
-mode slave
END OF
PAGE 1
, ARCHITECT EXAM 2025
-master_uri https://ip:8089
-secret passwd
-replication_port 9100
QUESTION 4
What command configures the SH's? - ANSWERS-splunk edit cluster-config
-mode searchhead
-master_uri https://ip:8089
-secret passwd
QUESTION 5
What is the difference between complete and valid? - ANSWERS-Complete
matches the number of copies in each bucket
Valid means at least one searchable bucket
QUESTION 6
What endpoint do cluster peers communicate? - ANSWERS-
/service/cluster/master (peer to master)
/service/cluster/slave (master to peer)
END OF
PAGE 2
, ARCHITECT EXAM 2025
QUESTION 7
To troubleshoot clustering issues, what components are in splunkd.log? -
ANSWERS-CM* or Cluster*, look for errors on Master
QUESTION 8
What happens when a cluster node fails? - ANSWERS-Continues to operate
data might not replicate
SH send queries to last known peers
after Master comes back online, buckets rebalanced
QUESTION 9
What happens when a Master node fails? - ANSWERS-Continues to operate
data might not replicate
SH send queries to last known peers
after Master comes back online, buckets rebalanced
END OF
PAGE 3
, ARCHITECT EXAM 2025
QUESTION 10
What can I run to add a non-clustered indexer to a cluster as a peer? Will old data
be replicated to the new peer? - ANSWERS-splunk edit cluster-config -mode slave
...
NO
QUESTION 11
What are the commands to configure a multisite master node? - ANSWERS-splunk
edit cluster-config
-mode master
-multisite true
-site site1
-available_sites site1, site2
-site_replication_factor origin1, total:2
-site_search_factor origin1, total:2
-secret passwd (saved as pass4SymmKey)
END OF
PAGE 4
