Splunk Enterprise Certified Architect — Question 4

Which of the following statements describe a Search Head Cluster (SHC) captain? (Select all that apply.)

Answer options

• A. Is the job scheduler for the entire SHC.
• B. Manages alert action suppressions (throttling).
• C. Synchronizes the member list with the KV store primary.
• D. Replicates the SHC's knowledge bundle to the search peers.

Correct answer: A, B

Explanation

Options A and B correctly describe the functions of an SHC captain, as it is responsible for job scheduling and managing alert action suppressions. Options C and D are incorrect because they pertain to roles that are not specifically assigned to the SHC captain, such as member list synchronization and knowledge bundle replication.