Free Consul-Associate Practice Exam Questions Online

Why HashiCorp Consul-Associate Practice Exam Questions?

Ready to level up your HashiCorp Consul-Associate exam study? Just TheExamsLab Consul-Associate practice tests free.

Consul-Associate exam questions are expertly crafted practice tests designed to simulate the real HashiCorp certification exam environment and help you assess your knowledge and figure out where you are lacking. From our free HashiCorp Certified: Consul Associate Consul-Associate practice exam, you will feel secure in passing any question type or time limit. TheExamsLab offers the Consul-Associate exam questions 2024. Don’t settle or do it half-heartedly get the best and invest in the best what you want is what you get.

Page: 1 / 35

Total 174 Questions | Updated On: Nov 19, 2024

Add To Cart

Question 1

What command can be used for new Consul agents to become a member of an existing cluster?

A : consul join

B : consul cluster -join

C : consul exec -join

D : consul connect

Answer: A

Question 2

You have two Consul datacenters and you want to enable federation so services in dc1 can discover services in dc2. You run the consul join wan node2.example.com.

However, servers in dc1 can not communicate with servers in dc2 and vice versa. Based on the snippets of the server configuration files can be found below, why would

this be assuming network connectivity is working as expected?

dc1 configuration

1. "datacenter": "dc1",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "XIUEktl3YjG9KPJfaBU1xE69IZ0XhsNCSH423FyknJE=",

11. "bootstrap_expect": 5,

12. "enable_syslog": true,

dc2 configuration

1. "datacenter": "dc2",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "LSBSOZI5+9EX/kdY8u27mX50rk1ywcprfUCoSZjnpUg=",

11. "bootstrap_expect": 5,

12. "enable_syslog": false,

A : the gossip keys need to match between federated datacenters

B : the verify_incoming setting should be set to false before WAN federation can be configured

C : the client certificates are issued from different CAs

D : the syslog configurations do not match

Answer: A

Question 3

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

A : all servers, including servers in all Consul federated datacenters

B : clients within the local Consul datacenter

C : servers within the local Consul datacenter

D : both clients and servers within the local Consul datacenter

Answer: C

Question 4

True or False? A prepared query can be used to assist with service failover between multiple federated Consul datacenters.

A : false

B : true

Answer: B

Question 5

You have a Consul cluster running production workloads in your environment. However, you've discovered that the cluster was initially deployed without gossip

encryption configured, which means that traffic is being sent in cleartext. The security team has requested this to be updated ASAP. However, you can't take an outage on

the Consul service right now, knowing the server nodes will stop communicating once you start editing the configuration files one by one.

How can you enable gossip encryption on the existing cluster without affecting the services it is currently providing the business?

A : Generate the new encryption key using consul keygen. Update all the Consul server agent configuration files with the new encryption key. Using a scheduling tool,execute the consul reload command for all nodes at the same time. This will ensure that there is minimal downtime for the Consul service.

B : Generate the new encryption key using consul keygen. Update each Consul agent configuration file with the new configuration and set additional parameters toverify incoming and outgoing encryption to false. Use rolling updates to walk through the steps of ultimately setting the parameters to true.

C : Generate the new encryption key using consul keygen. Use the command consul keyring -install and push the new encryption key out to all participatingnodes in the cluster. Finally, use the command consul keyring -use to instruct Consul to use the key for encryption

D : Generate the new encryption key using consul keygen. Update the Consul server agent configuration files with the new encryption key and issue a kill -HUP command so the Consul service reloads and picks up the new gossip configuration. Update and restart as a rolling update across the cluster so only asingle node is offline at a time.

Answer: B

Page: 1 / 35

Total 174 Questions | Updated On: Nov 19, 2024

Add To Cart