Consul Associate Dumps Questions - Effective Way to Get Certified

Consul Associate Dumps Questions – Effective Way to Get Certified

Category:

Comments:

0 Comments

Post Date:

April 13, 2023

If you're in the field of HashiCorp, you know how important it is to stay up-to-date with the latest knowledge and skills to protect your organization's networks and data. One way to do that is by obtaining HashiCorp Networking Automation, specifically the Consul Associate exam. While preparing for the Consul Associate exam, you might consider using Consul Associate dumps to help you familiarize yourself with the exam format and content. These Consul Associate exam dumps questions can be an effective way to gauge your knowledge and identify areas where you may need additional study. Study online free Consul Associate exam dumps below.

Page 1 of 5

1. You need to group individual policies into a higher-level object which can then be assigned to a user.

What Consul ACL feature would you use for this?

ACL Policies

ACL tokens

ACL roles

ACL Service Identity

2. True or False? A prepared query can be used to assist with service failover between multiple federated Consul datacenters.

true

false

3. You have deployed a new Consul cluster to be used for service discovery between your microservices for a new application. In the configuration file, as shown below, you have enabled ACLs and bootstrapped the ACL system. However, clients are still being permitted to read and write to the ACL system or register services without a valid token.

Based on the policy, what change needs to be made to finish securing Consul?

reload the configuration on all the nodes after the bootstrap token was created

apply the bootstrap token to the other nodes

update the default_policy across all of the Consul nodes

configure the ACL policy for the anonymous token to deny all client requests

4. From the options below, select the features that are available in Consul Enterprise, and not available in the open-source offering.

Connect (service to service authorization and encryption)

OIDC auth method (centralized authentication)

Consul snapshot agent (automated backups)

Namespaces (datacenter isolation)

Sentinel (Policy as Code)

Autopilot (automated upgrades)

5. You are running a Consul Enterprise deployment with immutable nodes and want to establish a backup strategy since Consul is heavily used within your organization.

Which method below would provide automated backups and ensure that the snapshots are stored on a secure, durable storage solution?

logging into the node and executing the consul snapshot save command

consul snapshot agent

configure the Consul agent to execute the snapshot command every hour

a cron job that executes the command consul snapshot save backup.snap every hour

6. Based on the output of the DNS query below, how many hosts have registered the service named eCommerce-Front-End?

cannot determine from the information shown

7. Which of the following security methods does Consul use to secure gossip communication throughout the cluster?

TLS certificates

mutual TLS certificates

ACLs

pre-shared symmetric key

8. True or False? Assuming the service is running, the health check defined with the service definition below will report that the service is healthy and traffic will be directed to web-server-a for the service named web.

false

true

9. There are two methods to bind the Consul service to a specific IP address.

What are the two ways? (select two)

in the command line that is executed when the Consul service is started

using the configuration file

setting the preferred static IP address on eth0 rather than eth1

by using an environment variable

10. Based on the Consul Connect drawing below, what component is represented by the green arrow?

sidecar proxy

consul agent

application

certificate authority

Page 2 of 5

11. Your colleague has deployed a new Consul cluster, and you want to double-check the encryption key used for gossip communication. You open up an SSH session to a Consul node and type the command consul keyring -list but receive the following error.

From the error message below, what is missing from the Consul agent configuration file?

$ consul keyring -list

==> Gathering installed encryption keys...

the encryption parameter with a valid of true or 1

the encrypt parameter and the corresponding value

the gossip parameter and a value of true

configuration for the tls certificate, the private key, and the CA bundle

12. Danny needs to write an ACL policy to provide the application team the ability to register and manage a new service named performance-stats, which is used to display dashboards for drive-thru fast-food restaurants.

Which of the following policies would permit the registration of this new service? (select two)

service "performance-stats" { policy = "write"}key_prefix "kv/apps/performance" { policy = "read"}

service_prefix "" {policy = "read"}key "kv/apps/performance" {policy = "write"}

service "performance-stats" {policy = "read"}key_prefix "kv/apps/performance" {policy = "write"}

service_prefix "" {policy = "write"}key "kv/apps/performance" {policy = "write"}

13. True or False? Regardless of what Consul version (Open-source or Enterprise), you can scale the Consul cluster with non-voting members to increase read capabilities.

true

false

14. Based on the Consul agent configuration below, what parameter will determine which interface Consul will use for internal cluster communications?

{ "log_level": "INFO", "server": true, "node_name": "node-a.example.com", "key_file": "/etc/consul.d/cert.key", "cert_file": "/etc/consul.d/client.pem", "ca_file": "/etc/consul.d/chain.pem", "verify_incoming": true, "verify_outgoing": true, "encrypt": "xxxxxxxxxxxxxxxxxxxxxxxx", "data_dir": "/opt/consul/data", "datacenter": "us-east-1", "bind_addr": "10.0.30.186", "client_addr": "0.0.0.0", "retry_join": ["provider=aws tag_key=Environment-Name tag_value=consul region=us-east-1"], "enable_syslog": true, "acl": { "tokens": { "agent": "xxxxxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx" } } }

"node_name": "node-a.example.com"

"client_addr": "0.0.0.0"

"verify_outgoing": true

"bind_addr": "10.0.30.186"

15. When Consul ACLs are bootstrapped, Consul creates an anonymous token.

Which of the following statements are true in regards to the anonymous token? (select three)

it cannot be deleted

it can be deleted if it is not needed

it's used by clients that do not specify a token

the policy can be updated based on your preferences or requirements

16. You need to look up the members of the current Consul cluster. Consul ACLs have been enabled with a default rule of deny. You run the command consul members and receive the results as expected.

Which of the statements below can be true? (select two)

the anonymous token permits you to read this information

you're logged in directly on a Consul server node, therefore a token isn't needed to execute read-only commands

you're running as a privileged user, so a token is not needed

the token was already set using the CONSUL_HTTP_TOKEN environment variable

17. Which nodes in a Consul datacenter participate in the WAN gossip pool? (select two)

Consul server nodes

Consul non-voting server nodes

Consul consumers (meaning any client accessing Consul - like a user desktop)

Consul client nodes

18. Based on the screenshot below, select the answers that are true: (select three)

Consul will continue to send traffic to this host since the host is healthy

although the host has registered, the health check is failing

there is a single node that has registered the counting service

Consul will not send traffic to this host since the health check is failing

19. What command can be used to create a 32-byte, Base64 encoded shared secret to be used for gossip encryption?

consul gossip key generate

consul keygen gossip

consul keygen

consul gossip generate

20. In order to provide high availability and ensure that Consul's state is preserved even if a server fails, HashiCorp suggests that Consul should be configured to run __________.

on a public cloud platform that can provide hardware redundancy

only Kubernetes to provide scheduling for new Consul nodes

on as many servers as needed to scale for performance

in a cluster made up of three to five servers

Page 3 of 5

21. Based on the payload below, what Consul feature is being created with the API?

{

"Name": "db-service",

"Session": "adf4238a-882b-9ddc-4a9d-5b6758e4159e",

"Token": "",

"Service": {

"Service": "redis",

"Failover": {

"NearestN": 3,

"Datacenters": ["dc1", "dc2"]

},

"Near": "node1",

"OnlyPassing": false,

"Tags": ["primary", "!experimental"],

"NodeMeta": { "instance_type": "m3.large" },

"ServiceMeta": { "environment": "production" }

},

"DNS": {

"TTL": "10s"

}

}

service

prepared query

Consul agent

service mesh intention

22. True or False? When running Consul OSS, you can use the snapshot command/API to natively create and store snapshots to cloud-based storage.

False

True

23. Sara has deployed a new application and has successfully registered the new service with Consul. However, Sara needs to add health checks to the configuration to ensure the local agent understands when the application is healthy or not.

How can Sara update the service definition without negatively impacting the Consul Agent or the availability of the service itself? (select two)

update the service definition file and run a consul reload

update the service definition using the Consul API

deregister the service and re-register using the updated configuration definition file

update the service definition file and Consul will automatically pick up the changes

24. True or False? Using the / character, Consul organizes the data in a directory structure, similar to a file system.

true

false

25. Which of the following is responsible for managing membership and broadcasting messages to the cluster?

Prepared Queries

Raft (Paxos)

Discovery chain

Serf (SWIM)

26. Based on the information below, what will happen if you try to register this service definition on multiple nodes assuming there is an app running on tcp/8080?

{

"service": {

"name": "front-end-eCommerce",

"tags": ["v7.05", "production"],

"port": 8080,

"checks": [

{

"args": ["/usr/local/bin/check_mem.py"],

"interval": "30s"

}

],

}

}

the first host will successfully register the service, but the second host will fail

the first host will fail to register the service

the service registration will work on both of the hosts

neither host will be able to register the service with this service definition

27. Select the two ways that applications can participate in Consul service mesh functionality (select two)

native application integration

by configuring downstream services in the configuration file

through Consul replication

sidecar proxy

28. Which of the following is NOT a core feature of HashiCorp Consul?

layer 7 traffic management

distributed health checks

service configuration

service segmentation

service discovery

application deployment

29. Consul uses many different mechanisms to help ensure Consul is secure, allowing us to run Consul over untrusted networks such as a public cloud provider or the Internet. When using Consul Service mesh, how do services authenticate with Consul to validate integrity?

mTLS

microsegmentation

shared key

TLS

30. Select the benefits that the LAN gossip pool provides to a Consul datacenter (select three)

reliable and fast event broadcasts

failure detection work to be shared by the entire cluster

automatically discover servers, reducing the amount of configuration needed

perform cross datacenter requests

Page 4 of 5

31. All Consul agents require access to durable storage where it can store state, which is especially important for server agents.

What configuration parameter is used to specify the location of this directory?

-log-file

-data-dir

-node-meta

-log-json

32. Based on the file below, in what directory would you place the consul.hcl configuration file in order to start the Consul service?

/usr/local/bin

/opt/services/consul

/etc/consul.d/

/etc/systemd/system/

33. Service Mesh intentions follow specific precedence and match order using a top-down ruleset. The full precedence table is shown below and is evaluated top to bottom, with larger numbers being evaluated

first.

True or False? If needed, you change the precedence in order to evaluate more generic rules before more specific rules?

False

True

34. After enabling auto_encrypt, where do Consul clients store the certificates that are automatically generated by the Consul CA?

in the same directory of the Consul agent configuration

the local certificate store on the client

on the root drive on the client in the .consul directory

they are stored in memory

35. Which of the following Consul features is responsible for securing inter-service communication with mutual TLS by using sidecar proxies?

Consul ACLs

Envoy

Consul Connect

Consul Gossip

36. You have successfully configured a watch using the agent configuration but need to add a second watch to monitor additional services. You update and save the agent configuration, but the new watch isn't working.

What must be done for the new watch to take effect?

{

"type": "key",

"key": "app1/config/database",

"args": ["/usr/bin/update-database.sh", "-webapp1"]

}

reload the configuration using consul reload

wait for raft to replicate the changes to all the other nodes

restart the Consul service as a consul reload won't read the entire configuration

you can only configure a single watch in the configuration file, all others must be done via command line using the consul watch command

37. True or False? Based on the ACL policy below, you would be able to register a service named web-app1 using a token associated with this policy.

service_prefix "" {

policy = "write"

}

node_prefix "" {

policy = "read"

}

true

false

38. What are the three types of certificates that you can generate by using the consul tls cert create command? (select three)

client

server

CLI

API

39. Consul has been running in your organization for a year now, and the configuration meets all the requirements of the Consul security model (ACLs, Gossip encryption, TLS, etc). Company security policies demand that all static encryption keys be rotated once a year, at a minimum.

How can you quickly rotate the gossip encryption key without negatively impacting the Consul service or any of the hundreds of applications registered or using Consul?

set the auto-rotate configuration to 1 year in the gossip configuration stanza

generate a new key and reconfigure all of the agent configuration files across all servers and agents

use the consul keyring command to distribute and install a new key

use consul keygen to generate the new key

40. You need to determine the leader node for the Consul cluster.

What command allows you to quickly identify the nodes and their current roles within the cluster? Example of the command's output:

consul operator raft list-peers

consul members

consul raft- list

consul nodes -leader

Page 5 of 5

41. The Consul KV store can be accessed by the following methods: (select three)

CLI

federated cluster

API

42. A service supporting a grocery store is using Consul for service discovery. Multiple instances of the inventory service have been registered with a health check to ensure each individual instance is healthy. You've decided that you want to add a second health check to the service, so you update the agent configuration file. However, the new health check has not been registered with Consul.

How can you update the Consul agent without any downtime to include the new health check?

restart to the Consul service

perform a consul reload

log into the Consul UI and add the health check manually

instruct the Consul servers to update all of the Consul client configurations

43. Select the following statements that are true in defining a prepared query: (select three)

used to filter the results of a service request

can only be used with the DNS interface

invoked by applications to retrieve results

objects that are defined at the data center level

44. True or False? You want to restore a Consul from a snapshot. On a five-node Consul cluster, the consul snapshot restore filename.snap command must be run on each individual node before starting the Consul service.

false

true

45. From the code snippets below, identify the one which is a prepared query.

main = rule { valid_key() required = [["port", "d+"], # ports must be integers["name", "w+"], # name must be a word valid_key = func() {for required as v {if key is v[0] {return value matches v[1]} return false}

{"service": {"id": "web-server-a","name": "web","port": 80,"tags": ["app1","web","blue"],"enable_tag_override": false,"checks": [{"interval": "10s","name": "WebServer","tcp": "localhost:80","DeregisterCriticalServiceAfter": "60s"}]}}

key_prefix "vault/" {policy = "write"}node_prefix "" {policy = "write"}service "vault" {policy = "write"}agent_prefix "" {policy = "write"}session_prefix "" {policy = "write"}

{ "Name": "web-app1", "Template": { "Type": "name_prefix_match" }, "Service": { "Service": "${name.full}", "Failover": { "NearestN": 2 } } }

46. Complete the sentence:

The main restriction on Consul's K/V store is an object's size, which can be a maximum of _______?

512KB

64KB

1MB

8KB

47. True or False? Once created, the bootstrap token should be saved in a secure place, as it can never be replaced without reinstalling the Consul server.

true

false

48. What Consul command was executed on the CLI to result in the following output?

consul member -list

consul members

consul cluster -list

consul nodes -list

49. Using the service configuration below, what service will be registered, and what port will the service run on?

{

"service": {

"ID": "watermark_web_a",

"name": "picture_app",

"tags": ["front-end", "watermark"],

"port": 8080,

"check": {

"id": "picture_app_check",

"name": "Check Counter health 80",

"tcp": "localhost:80",

"interval": "10s",

"timeout": "1s"

}

}

}

picture_app running on port 8080

picture_app running on port 80

watermark_web_a running on port 80

watermark_web_a running on port 8080

50. You have just successfully executed the following CLI command on one of the Consul server follower nodes:

$ consul snapshot save backup.snap

What node in the cluster took the Consul snapshot?

any node in the cluster

the follower where the command was executed

the leader

any follower

TAGS:

Consul Associate, Consul Associate exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get Consul Associate Dumps Full Version

Q&As: 171
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Consul Associate Dumps Questions – Effective Way to Get Certified

Related

Posts

HashiCorp Terraform Associate 003 Exam Questions Simulate Actual Terraform Associate 003 Exam

Online Terraform Associate 003 Dumps Help You Understand Questions Well

Pass TA-003-P Exam to Get HashiCorp Certification

Pass VA-002-P Exam to Get HashiCorp Certification

About Us

EMAIL

Services

Opening Hours