Splunk Core Certified Advanced Power User — Question 46

Which of the following is a benefit of distributed search?

Answer options

• A. Peers run search in sequence.
• B. Peers run search in parallel.
• C. Resilience from indexer failure.
• D. Resilience from search head failure.

Correct answer: B

Explanation

The correct answer is B because distributed search allows multiple peers to perform searches at the same time, which improves efficiency and speed. Option A is incorrect as it describes a sequential process, which is less efficient. Options C and D refer to resilience but do not address the parallel execution benefit of search processes.