Splunk Enterprise Security Certified Analyst — Question 79

In addition to the normal responsibilities of a search head cluster captain, which of the following is a default behavior?

Answer options

• A. The captain is not a cluster member and does not perform normal search activities.
• B. The captain is a cluster member who performs normal search activities.
• C. The captain is not a cluster member but does perform normal search activities.
• D. The captain is a cluster member but does not perform normal search activities.

Correct answer: B

Explanation

The correct answer is B because a search head cluster captain is indeed a cluster member and engages in standard search functions. Options A and C incorrectly state that the captain does not participate in normal search activities, while option D wrongly claims that the captain, although a member, abstains from these activities.