Free HashiCorp Consul-Associate Exam Questions

Become HashiCorp Certified with updated Consul-Associate exam questions and correct answers

Page: 1 / 35

Total 174 Questions | Updated On: Jan 04, 2026

Add To Cart

Question 1

What are two ways that a client or service can programmatically discover healthy nodes for a service registered in a local Consul cluster? (select two)

A :

B : er Interface (UI)

C : TP API

D : deration

Answer: A,C

Question 2

Scenario: You are storing configuration settings for your application in Consul's K/V store, and each setting is critical to the successful implementation of the application.

A developer recently updated the value for app1, causing the deployment to fail.

What Consul feature can be used to monitor the K/V store for updates and automatically take action to remediate the issue?

A : t up an ACL to automatically restart the Consul service when a value is changed

B : configure a watch and execute a script to update the application

C : t up health checks to monitor for changes to the K/V store

D : the raft consensus protocol to replicate the changes from the other nodes when a value is changed

Answer: A

Question 3

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

A : ft (Paxos)

B : covery chain

C : rf (SWIM)

D : epared Queries

Answer: C

Question 4

You have a Consul cluster running production workloads in your environment. However, you've discovered that the cluster was initially deployed without gossip

encryption configured, which means that traffic is being sent in cleartext. The security team has requested this to be updated ASAP. However, you can't take an outage on

the Consul service right now, knowing the server nodes will stop communicating once you start editing the configuration files one by one.

How can you enable gossip encryption on the existing cluster without affecting the services it is currently providing the business?

A : Generate the new encryption key using consul keygen. Update all the Consul server agent configuration files with the new encryption key. Using a scheduling tool,execute the consul reload command for all nodes at the same time. This will ensure that there is minimal downtime for the Consul service.

B : Generate the new encryption key using consul keygen. Update each Consul agent configuration file with the new configuration and set additional parameters toverify incoming and outgoing encryption to false. Use rolling updates to walk through the steps of ultimately setting the parameters to true.

C : Generate the new encryption key using consul keygen. Use the command consul keyring -install and push the new encryption key out to all participatingnodes in the cluster. Finally, use the command consul keyring -use to instruct Consul to use the key for encryption

D : Generate the new encryption key using consul keygen. Update the Consul server agent configuration files with the new encryption key and issue a kill -HUP command so the Consul service reloads and picks up the new gossip configuration. Update and restart as a rolling update across the cluster so only asingle node is offline at a time.

Answer: B

Question 5

What command can be used for new Consul agents to become a member of an existing cluster?

A : nsul join

B : nsul cluster -join

C : nsul exec -join

D : nsul connect

Answer: A

Page: 1 / 35

Total 174 Questions | Updated On: Jan 04, 2026

Add To Cart