Objective 17.2

Enterprise Certified Architect

Peer offline and decommission

Objective 17.2 sits in Indexer Cluster Management and Administration, which carries 7% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

17-2Indexer Cluster Management and Administration

An engineer asks how a peer node can go down. What does Splunk say?

Only intentionallySplunk names both intentional and unintentional cases.
Intentionally or notCorrect · your answerCorrect.
Only by crashingA crash is one of the two documented cases.
Only on upgradeUpgrades are one occasion rather than the only cause.

Correct.

Checked against help.splunk.com, August 2026

Concept

A planned removal and a crash leave the cluster in the same state, so the remedial machinery is the same either way. Knowing that means a decommission needs no special handling.

Why B

Splunk states that a peer node can go down either intentionally, by invoking the CLI offline command, or unintentionally, for example by a server crashing.

Source

A peer node can go down either intentionally (by invoking the CLI offline command, as described in Take a peer offline ) or unintentionally (for example, by a server crashing).

Splunk Docs: What happens when a peer node goes down, checked August 2026
#clustering#peer-offline

Now you: objective 17.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

17-2Indexer Cluster Management and Administration

An administrator asks what the manager does after a peer goes down. What does Splunk call it?

Sample question 2 of 3

17-2Indexer Cluster Management and Administration

An analyst asks what the manager tracks about bucket copies. What does Splunk say?

Sample question 3 of 3

17-2Indexer Cluster Management and Administration

A team lead asks what the complete state means. What does Splunk say?

Full Enterprise Certified Architect question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Indexer Cluster Management and Administration