A non-ES customer has a concern about data availability during a disaster recovery event.

 The Topology Category Code: M14 would be recommended for a non-ES customer who has a concern about data availability during a disaster recovery event. This is because this topology provides high availability and disaster recovery for both the search head and the indexer layer, as well as load balancing and data replication. The M14 topology consists of two search head clusters, each with a minimum of three search heads, and two indexer clusters, each with a minimum of three indexers. The search head clusters are connected to their respective indexer clusters via the cluster master, and the indexer clusters are replicated across two sites using the site replication factor. This ensures that the data is available in both sites and can be searched by either search head cluster in case of a site failure. References:

[Splunk Certification Exam Study Guide], page 9

[Splunk Documentation: Splunk Validated Architectures]