Free HashiCorp Consul-Associate Exam Questions

Become HashiCorp Certified with updated Consul-Associate exam questions and correct answers

Page: 1 / 35

Total 174 Questions | Updated On: Jan 13, 2026

Add To Cart

Question 1

True or False? A service definition can include multiple health checks.

A : lse

B : ue

Answer: B

Question 2

Scenario: You are storing configuration settings for your application in Consul's K/V store, and each setting is critical to the successful implementation of the application.

A developer recently updated the value for app1, causing the deployment to fail.

What Consul feature can be used to monitor the K/V store for updates and automatically take action to remediate the issue?

A : t up an ACL to automatically restart the Consul service when a value is changed

B : configure a watch and execute a script to update the application

C : t up health checks to monitor for changes to the K/V store

D : the raft consensus protocol to replicate the changes from the other nodes when a value is changed

Answer: A

Question 3

You have two Consul datacenters and you want to enable federation so services in dc1 can discover services in dc2. You run the consul join wan node2.example.com.

However, servers in dc1 can not communicate with servers in dc2 and vice versa. Based on the snippets of the server configuration files can be found below, why would

this be assuming network connectivity is working as expected?

dc1 configuration

1. "datacenter": "dc1",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "XIUEktl3YjG9KPJfaBU1xE69IZ0XhsNCSH423FyknJE=",

11. "bootstrap_expect": 5,

12. "enable_syslog": true,

dc2 configuration

1. "datacenter": "dc2",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "LSBSOZI5+9EX/kdY8u27mX50rk1ywcprfUCoSZjnpUg=",

11. "bootstrap_expect": 5,

12. "enable_syslog": false,

A : gossip keys need to match between federated datacenters

B : verify_incoming setting should be set to false before WAN federation can be configured

C : client certificates are issued from different CAs

D : syslog configurations do not match

Answer: A

Question 4

Which of the following are valid Consul watch types that you can use to monitor updates in Consul? (select five)

A : yprefix

B : rvice

C : rvices

D : gin

E : des

F : arm

G : y

Answer: A,B,C

Question 5

Scenario: You have an application that uses Consul service discovery to connect to backend services in order to process data submitted by end-users. The front-end web

service consists of 3 containers, while the backend service consists of 5 static virtual machines. All of the front-end web servers and the backend servers are registered

with Consul.

During normal operations, a user complains that the data processing is taking too long. To troubleshoot, you run a DNS query against the DNS name for the backend

service, but discover that the response only contains three of the virtual machines. Why would Consul only respond with three servers rather than all five?

A : the response only included the three underutilized nodes

B : the DNS query must specify how many nodes to return in the response

C : health check is failing for the other two servers

D : nsul has a maximum response of three nodes in a given DNS query

Answer: C

Page: 1 / 35

Total 174 Questions | Updated On: Jan 13, 2026

Add To Cart