Splunk Enterprise Security Certified Analyst — Question 18

Which of the following statements is true, as it pertains to search head clustering (SHC)?

Answer options

• A. SHC is supported on AIX, Linux, and Windows operating systems.
• B. Maximum number of nodes for a SHC is 10.
• C. SHC members must run on the same hardware specifications.
• D. Minimum number of nodes for a SHC is 5.

Correct answer: C

Explanation

The correct answer is C because SHC members are required to have the same hardware specifications to ensure compatibility and performance. Option A is incorrect as it does not specify the operating systems that support SHC. Option B is wrong because the maximum number of nodes for a SHC is not limited to 10. Option D is also incorrect since the minimum number of nodes for a SHC is not 5.