Splunk Enterprise Certified Architect — Question 65

A search head cluster with a KV store collection can be updated from where in the KV store collection?

Answer options

• A. The KV store primary search head.
• B. Any search head except the captain.
• C. The search head cluster captain.
• D. Any search head in the cluster.

Correct answer: A

Explanation

The correct answer is A because updates to the KV store collection can only be made from the primary search head. Options B, C, and D are incorrect as they suggest other search heads or the captain can make updates, which is not permitted.