Question 1

Complete the sentence using the correct answer below:

When authentication is enabled, a Consul token should be provided to make API requests using the ___________ or ___________ header

Options :

A : X-Consul-Token

B :

ACL_Token

C : Consul_Token

D :

Token

E : Authorization: Bearer

Answer: A

Question 2

Scenario: You are storing configuration settings for your application in Consul's K/V store, and each setting is critical to the successful implementation of the application.

A developer recently updated the value for app1, causing the deployment to fail.

What Consul feature can be used to monitor the K/V store for updates and automatically take action to remediate the issue?

Options :

A : set up an ACL to automatically restart the Consul service when a value is changed

B :

configure a watch and execute a script to update the application

C : set up health checks to monitor for changes to the K/V store

D : use the raft consensus protocol to replicate the changes from the other nodes when a value is changed

Answer: A

Question 3

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

Options :

A : all servers, including servers in all Consul federated datacenters

B : clients within the local Consul datacenter

C : servers within the local Consul datacenter

D : both clients and servers within the local Consul datacenter

Answer: C

Question 4

Which of the following are valid Consul watch types that you can use to monitor updates in Consul? (select five)

Options :

A : keyprefix

B : service

C : services

D : login

E : nodes

F : alarm

G : key

Answer: A,B,C

Question 5

You have two Consul datacenters and you want to enable federation so services in dc1 can discover services in dc2. You run the consul join wan node2.example.com.

However, servers in dc1 can not communicate with servers in dc2 and vice versa. Based on the snippets of the server configuration files can be found below, why would

this be assuming network connectivity is working as expected?

dc1 configuration

1. "datacenter": "dc1",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "XIUEktl3YjG9KPJfaBU1xE69IZ0XhsNCSH423FyknJE=",

11. "bootstrap_expect": 5,

12. "enable_syslog": true,

dc2 configuration

1. "datacenter": "dc2",

2. "server": true,

3. "key_file": "/etc/consul.d/cert.key",

4. "cert_file": "/etc/consul.d/client.pem",

5. "ca_file": "/etc/consul.d/chain.pem",

6. "verify_incoming": true,

7. "verify_outgoing": true,

8. "verify_server_hostname": true,

9. "ui": true,

10. "encrypt": "LSBSOZI5+9EX/kdY8u27mX50rk1ywcprfUCoSZjnpUg=",

11. "bootstrap_expect": 5,

12. "enable_syslog": false,

Options :

A : the gossip keys need to match between federated datacenters

B : the verify_incoming setting should be set to false before WAN federation can be configured

C : the client certificates are issued from different CAs

D : the syslog configurations do not match

Answer: A

Confidently Practice Online with Free Consul-Associate Exam Cram

Buying Options: