Splunk Enterprise Certified Architect — Question 46

What are the minimum supported requirements to run a search head cluster (SHC)?

Answer options

• A. Two search heads and a deployment server.
• B. Three search heads and a deployer.
• C. Two search heads and a deployer.
• D. Three search heads, a deployer, and a deployment server.

Correct answer: B

Explanation

The correct answer is B because a search head cluster requires a minimum of three search heads to ensure high availability and load balancing. Options A and C do not meet the minimum requirement of three search heads, while option D includes unnecessary components beyond the minimum needed.