Free HashiCorp Consul-Associate Exam Questions

Become HashiCorp Certified with updated Consul-Associate exam questions and correct answers

Page: 1 / 35

Total 174 Questions | Updated On: May 12, 2026

Add To Cart

Question 1

What are two ways that a client or service can programmatically discover healthy nodes for a service registered in a local Consul cluster? (select two)

A :

B : er Interface (UI)

C : TP API

D : deration

Answer: A,C

Question 2

You are using the Consul KV store and need to be able to easily list all of the keys in a given path. What is the easiest way to do so?

A : consul kv read -recursive

B : nsul kv get -recurse

C : nsul kv read

D : nsul kv get *.*

Answer: B

Question 3

Which of the following are valid Consul watch types that you can use to monitor updates in Consul? (select five)

A : yprefix

B : rvice

C : rvices

D : gin

E : des

F : arm

G : y

Answer: A,B,C

Question 4

You have created a new gossip encryption key using consul keygen and installed it using the command consul keyring -install

TX/1dsj67x/4XdTeSG1Cb5RdC/cbAbv9Hch4H8cL8nk=.

However, when you try and delete the original gossip encryption key, you receive an error. Based on the error message below, what steps need to be taken in order to be

able to remove the old gossip encryption key?

1. $ consul keyring -remove /d+jMNoQWICjMvddXJXzyGPDWiEOFgApvUJcuPRcves=

3. ==> Removing gossip encryption key...

4. error: Unexpected response code: 500 (12 errors occurred:

5. * WAN error: 5/5 nodes reported failure

6. * CONSUL-NODE-A.dc-1: Removing the primary key is not allowed

7. * CONSUL-NODE-C.dc-1: Removing the primary key is not allowed

8. * CONSUL-NODE-B.dc-1: Removing the primary key is not allowed

9. * CONSUL-NODE-D.dc-1: Removing the primary key is not allowed

10. * CONSUL-NODE-E.dc-1: Removing the primary key is not allowed

11. * dc-1 (LAN) error: 5/5 nodes reported failure

12. * CONSUL-NODE-E: Removing the primary key is not allowed

13. * CONSUL-NODE-A: Removing the primary key is not allowed

14. * CONSUL-NODE-D: Removing the primary key is not allowed

15. * CONSUL-NODE-B: Removing the primary key is not allowed

16. * CONSUL-NODE-C: Removing the primary key is not allowed

A : wait until the old key is invalidated by Consul based upon the configured validity date

B : nfigure Consul to use the new key using the consul keyring -use command

C : the original gossip key on a Consul cluster cannot be deleted

D : it for Raft to replicate the new key across all cluster nodes before you can remove it

Answer: A

Question 5

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

command:

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

A : default behavior of the command issued is allow

B : the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

C : services are communicating over HTTP rather than HTTPS

D : ere is an identical intention that is permitting the connectivity

Answer: A

Page: 1 / 35

Total 174 Questions | Updated On: May 12, 2026

Add To Cart