HCCAO-003 Exam: Absolutely Free Online Practice

Free HashiCorp HCCAO-003 Exam Questions

True or False? A service definition can include multiple health checks.

You have created a new gossip encryption key using consul keygen and installed it using the command consul keyring -install

TX/1dsj67x/4XdTeSG1Cb5RdC/cbAbv9Hch4H8cL8nk=.

However, when you try and delete the original gossip encryption key, you receive an error. Based on the error message below, what steps need to be taken in order to be

able to remove the old gossip encryption key?

1. $ consul keyring -remove /d+jMNoQWICjMvddXJXzyGPDWiEOFgApvUJcuPRcves=

3. ==> Removing gossip encryption key...

4. error: Unexpected response code: 500 (12 errors occurred:

5. * WAN error: 5/5 nodes reported failure

6. * CONSUL-NODE-A.dc-1: Removing the primary key is not allowed

7. * CONSUL-NODE-C.dc-1: Removing the primary key is not allowed

8. * CONSUL-NODE-B.dc-1: Removing the primary key is not allowed

9. * CONSUL-NODE-D.dc-1: Removing the primary key is not allowed

10. * CONSUL-NODE-E.dc-1: Removing the primary key is not allowed

11. * dc-1 (LAN) error: 5/5 nodes reported failure

12. * CONSUL-NODE-E: Removing the primary key is not allowed

13. * CONSUL-NODE-A: Removing the primary key is not allowed

14. * CONSUL-NODE-D: Removing the primary key is not allowed

15. * CONSUL-NODE-B: Removing the primary key is not allowed

16. * CONSUL-NODE-C: Removing the primary key is not allowed

wait until the old key is invalidated by Consul based upon the configured validity date

the original gossip key on a Consul cluster cannot be deleted

You have deployed a new Consul cluster to be used for service discovery between your microservices for a new application. In the configuration file, as shown below, you

have enabled ACLs and bootstrapped the ACL system. However, clients are still being permitted to read and write to the ACL system or register services without a valid

Based on the policy, what change needs to be made to finish securing Consul?

3. "node_name": "CONSUL-NODE-A",

4. "datacenter": "DC-1",

5. "data_dir": "/var/consul/data",

6. "bind_addr": "0.0.0.0",

7. "client_addr": "0.0.0.0",

8. "advertise_addr": "10.0.10.208",

9. "bootstrap_expect": 5,

10. "retry_join": ["provider=aws tag_key=consul tag_value=true"],

12. "log_level": "INFO",

14. "enabled": true,

15. "default_policy": "allow",

16. "down_policy": "extend-cache"

Scenario: You are storing configuration settings for your application in Consul's K/V store, and each setting is critical to the successful implementation of the application.

A developer recently updated the value for app1, causing the deployment to fail.

What Consul feature can be used to monitor the K/V store for updates and automatically take action to remediate the issue?

configure a watch and execute a script to update the application

Free HashiCorp HCCAO-003 Exam Questions

Absolute Free HCCAO-003 Exam Practice for Comprehensive Preparation