HashiCorp Certified: Consul Associate Exam Study Guides

1. Based upon the DNS query output below, select the answers below which are true statements. (select three)

2. A Consul snapshot saves a point-in-time snapshot of the state of the Consul servers, and includes what type of data? (select five)

3. The organization uses a service named phone-book for hitting a web service to lookup client phone numbers. However, users complain that the service is currently unavailable. You perform a manual DNS query of the service and the DNS response includes no value.

What are some reasons that the service does not return any valid hosts? (select three)

4. Consul uses a gossip protocol that is powered by Serf.

How is this communication protected between all participating servers and clients?

5. True or False? After executing the command below, the two registered services (front-end & inventory) will be able to communicate, assuming all other configurations are correct? consul intention create front-end inventory

6. In most organizations, a service will be run on multiple nodes to provide redundancy and high availability.

In the following example, what is the name of the Consul service that this service definition will create?

7. Consul has many default ports that are used for communication.

What port does Consul use as the default port for the UI and API interfaces?

8. From the options below, select the features that are available in Consul Enterprise, and not available in the open-source offering.

9. True or False? The Consul UI and the API can only be accessed from a Consul server itself.

10. Given the following screenshot, what path would you use to access the value shown?

11. Based on the configuration file below, what datacenter will the Consul agent join once the Consul service has started?

12. Complete the sentence using the answers below (select two):

In production, you would run a Consul agent in either ______ mode or ______ mode.

13. From the health checks below, which health check would be defined as a script check?

14. When deploying a new Consul cluster, multiple options can be used to bootstrap the cluster by setting the value in the configuration file or the command line. Select the valid parameter/command line flag that can be used. (select three)

15. Given the following prepared query, what steps can be taken to easily redirect users to a new version of an application? (select two)

{

"Name": “hashiconf-app",

"Service": {

"Service": “conference-app",

"Tags": ["v9.10"]

}

}

16. Certificates are a critical component of Consul Connect.

Which of the following certificate authorities (CAs) are supported by Consul? (select three)

17. There are two methods to bind the Consul service to a specific IP address.

What are the two ways? (select two)

18. During leadership election, which members in the local datacenter get a vote to elect a new leader?

19. The Consul security/threat model includes many guiding principals to ensure the protection of the Consul service.

Which of the following statements are true in regards to the security/threat model? (select three)

20. Scenario: You are manually creating Consul snapshots in preparation for an upgrade.

You save two snapshots, as shown in the commands below:





After inspecting the snapshots, you have noticed that the version number of the snapshot is not incrementing, and both snapshots display a value of 1.

Why is the value not incrementing?

21. After enabling auto_encrypt, where do Consul clients store the certificates that are automatically generated by the Consul CA?

22. Based on the file below, in what directory would you place the consul.hcl configuration file in order to start the Consul service?

23. What are two ways that a client or service can programmatically discover healthy nodes for a service registered in a local Consul cluster? (select two)

24. You have deployed a new Consul cluster to be used for service discovery between your microservices for a new application. In the configuration file, as shown below, you have enabled ACLs and bootstrapped the ACL system. However, clients are still being permitted to read and write to the ACL system or register services without a valid token.

Based on the policy, what change needs to be made to finish securing Consul?

25. The Consul KV store can be accessed by the following methods: (select three)

26. When ACLs are bootstrapped, Consul creates two special tokens that can be used immediately.

What are the two? (select two)

27. True or False? Once created, the bootstrap token should be saved in a secure place, as it can never be replaced without reinstalling the Consul server.

28. Which of the following Consul features is responsible for securing inter-service communication with mutual TLS by using sidecar proxies?

29. You are launching a new service to be registered with Consul. However, when you attempt to register the service using the following command you are getting a permission denied error.

consul services register /etc/consul.d/client/app1_service.json - token=988b8fb4-357a-376d-057e-9d9fd5a170a2

Based on the information provided below, why can't you successfully register the service?

------------------------------------------------------------------------------

The configuration below is being used to register the service:





The policy that the token is associated with is below:

30. What Consul command was executed on the CLI to result in the following output?

31. What command below can be used to display the participating servers and clients within the local Consul cluster?

32. Complete the sentence using the correct answer below:

When authentication is enabled, a Consul token should be provided to make API requests using the ___________ or ___________ header.

33. After enabling ACLs using the configuration file, ACLs aren't preventing users from querying services.

What are some reasons that Consul would continue to allow this to happen? (select three)

34. Scenario: You are storing configuration settings for your application in Consul's K/V store, and each setting is critical to the successful implementation of the application. A developer recently updated the value for app1, causing the deployment to fail.

What Consul feature can be used to monitor the K/V store for updates and automatically take action to remediate the issue?

35. True or False? When joining a new Consul agent to a cluster, the consul join command must include all the server nodes that make up the cluster.

36. True or False? Assuming the service is running, the health check defined with the service definition below will report that the service is healthy and traffic will be directed to web-server-a for the service named web.

37. Based on the screenshot below, select the answers that are true: (select three)

38. You are running a Consul Enterprise deployment with immutable nodes and want to establish a backup strategy since Consul is heavily used within your organization.

Which method below would provide automated backups and ensure that the snapshots are stored on a secure, durable storage solution?

39. Which of the following is responsible for managing membership and broadcasting messages to the cluster?

40. True or False? A prepared query can be used to assist with service failover between multiple federated Consul datacenters.

41. When manually creating a Consul snapshot, which of the following commands creates a snapshot and saves it to the local node?

42. You are verifying the gossip encryption key currently used on your Consul cluster. You notice a

discrepancy between the encryption key identified in the configuration file vs. what is being reported by

the consul keyring command.

What could be the reason for this?

-------------------------------------------------------------------

Excerpt from Configuration File:





The output from consul keyring command:

43. In the Enterprise offering of Consul, a server agent can be either a voting or non-voting member of the cluster. Select the statements below that are true in regards to a non-voting member. (select three)

44. Complete the sentence from the selections below (select three):

A Consul client is a lightweight process that _______, _______, and _______.

45. In order to provide high availability and ensure that Consul's state is preserved even if a server fails, HashiCorp suggests that Consul should be configured to run __________.

46. True or False? The open-source tools Consul Template and Envconsul require a Consul cluster to operate.

47. You are using the Consul KV store and need to be able to easily list all of the keys in a given path.

What is the easiest way to do so?

48. What command can be used to create a 32-byte, Base64 encoded shared secret to be used for gossip encryption?

49. True or False? Consul includes all its features in a single binary, such as service discovery, Consul Connect, and Consul Template.

50. There are several ways to register services in Consul. Select the valid options below: (select four)

51. Which token is always assigned the Accessor ID of 00000000-0000-0000-0000-000000000002, regardless of what cluster you are working on?

52. Complete the sentence:

The main restriction on Consul's K/V store is an object's size, which can be a maximum of _______?

53. The LAN gossip pool provided by Serf requires that all cluster members (servers and clients) can communicate over what tcp/udp port, by default?