ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-3003 All Questions

View all questions & answers for the SPLK-3003 exam
Go to Exam

Exam SPLK-3003 topic 1 question 63 discussion

Actual exam question from Splunk's SPLK-3003
Question #: 63
Topic #: 1
[All SPLK-3003 Questions]

A customer has three users and is planning to ingest 250GB of data per day. They are concerned with search uptime, can tolerate up to a two-hour downtime for the search tier, and want advice on single search head versus a search head cluster. (SHC).
Which recommendation is the most appropriate?

  • A. The customer should deploy two active search heads behind a load balancer to support HA.
  • B. The customer should deploy a SHC with a single member for HA; more members can be added later.
  • C. The customer should deploy a SHC, because it will be required to support the high volume of data.
  • D. The customer should deploy a single search head with a warm standby search head and an rsync process to synchronize configurations.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by jugulinho at May 27, 2021, 2:16 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
b5white
10 months ago
Selected Answer: B
The doc that BamBamMantell shared shows that this answer is an option.
upvoted 1 times
...
BamBamMantell
2 years, 8 months ago
B - Single Member Search head cluster - no HA required at this time, data volumes less than 300Gb, so only single node needed, but it gives an upgrade path. https://docs.splunk.com/Documentation/Splunk/9.0.1/DistSearch/DeploysinglememberSHC
upvoted 4 times
...
pepeperez
2 years, 10 months ago
Selected Answer: D
I would say D, B and C dont make sense and A is nonsense to have a load balancer to 2 different SHs
upvoted 4 times
...
noysherer
3 years, 11 months ago
The answer is D https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Summaryofperformancerecommendations
upvoted 4 times
...
splunkingyeti
3 years, 11 months ago
They don't need a full SHC for 3 users, so C is not correct.
upvoted 2 times
...
jugulinho
3 years, 11 months ago
I think C
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago