Consul-Associate Exam: Absolutely Free Online Practice

Free HashiCorp Consul-Associate Exam Questions

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

True or False? A service definition can include multiple health checks.

You have created a new gossip encryption key using consul keygen and installed it using the command consul keyring -install

TX/1dsj67x/4XdTeSG1Cb5RdC/cbAbv9Hch4H8cL8nk=.

However, when you try and delete the original gossip encryption key, you receive an error. Based on the error message below, what steps need to be taken in order to be

able to remove the old gossip encryption key?

1. $ consul keyring -remove /d+jMNoQWICjMvddXJXzyGPDWiEOFgApvUJcuPRcves=

3. ==> Removing gossip encryption key...

4. error: Unexpected response code: 500 (12 errors occurred:

5. * WAN error: 5/5 nodes reported failure

6. * CONSUL-NODE-A.dc-1: Removing the primary key is not allowed

7. * CONSUL-NODE-C.dc-1: Removing the primary key is not allowed

8. * CONSUL-NODE-B.dc-1: Removing the primary key is not allowed

9. * CONSUL-NODE-D.dc-1: Removing the primary key is not allowed

10. * CONSUL-NODE-E.dc-1: Removing the primary key is not allowed

11. * dc-1 (LAN) error: 5/5 nodes reported failure

12. * CONSUL-NODE-E: Removing the primary key is not allowed

13. * CONSUL-NODE-A: Removing the primary key is not allowed

14. * CONSUL-NODE-D: Removing the primary key is not allowed

15. * CONSUL-NODE-B: Removing the primary key is not allowed

16. * CONSUL-NODE-C: Removing the primary key is not allowed

wait until the old key is invalidated by Consul based upon the configured validity date

the original gossip key on a Consul cluster cannot be deleted

Free HashiCorp Consul-Associate Exam Questions

Absolute Free Consul-Associate Exam Practice for Comprehensive Preparation