HCCAO-003 Exam: Absolutely Free Online Practice

Free HashiCorp HCCAO-003 Exam Questions

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

You have created a new gossip encryption key using consul keygen and installed it using the command consul keyring -install

TX/1dsj67x/4XdTeSG1Cb5RdC/cbAbv9Hch4H8cL8nk=.

However, when you try and delete the original gossip encryption key, you receive an error. Based on the error message below, what steps need to be taken in order to be

able to remove the old gossip encryption key?

1. $ consul keyring -remove /d+jMNoQWICjMvddXJXzyGPDWiEOFgApvUJcuPRcves=

3. ==> Removing gossip encryption key...

4. error: Unexpected response code: 500 (12 errors occurred:

5. * WAN error: 5/5 nodes reported failure

6. * CONSUL-NODE-A.dc-1: Removing the primary key is not allowed

7. * CONSUL-NODE-C.dc-1: Removing the primary key is not allowed

8. * CONSUL-NODE-B.dc-1: Removing the primary key is not allowed

9. * CONSUL-NODE-D.dc-1: Removing the primary key is not allowed

10. * CONSUL-NODE-E.dc-1: Removing the primary key is not allowed

11. * dc-1 (LAN) error: 5/5 nodes reported failure

12. * CONSUL-NODE-E: Removing the primary key is not allowed

13. * CONSUL-NODE-A: Removing the primary key is not allowed

14. * CONSUL-NODE-D: Removing the primary key is not allowed

15. * CONSUL-NODE-B: Removing the primary key is not allowed

16. * CONSUL-NODE-C: Removing the primary key is not allowed

wait until the old key is invalidated by Consul based upon the configured validity date

the original gossip key on a Consul cluster cannot be deleted

What are two ways that a client or service can programmatically discover healthy nodes for a service registered in a local Consul cluster? (select two)

Free HashiCorp HCCAO-003 Exam Questions

Absolute Free HCCAO-003 Exam Practice for Comprehensive Preparation