Consul Associate exam

What command can be used to create a 32-byte, Base64 encoded shared secret to be used for gossip encryption?A . consul gossip key generate B. consul keygen gossip C. consul keygen D. consul gossip generateView AnswerAnswer: C Explanation: You can use the Consul CLI command, consul keygen, to generate a...

Given the following screenshot, what path would you use to access the value shown? A . app1/config/database B. kv/app1/config C. key/values/app1/config D. app1/configView AnswerAnswer: A Explanation: In the UI, the key is highlighted in bold above its value, therefore the path used to obtain the value shown would be app1/config/database

True or False? When joining a new Consul agent to a cluster, the consul join command must include all the server nodes that make up the cluster.A . False B. TrueView AnswerAnswer: A Explanation: A new Consul agent may join any node in the existing cluster. After joining with one...

Which token is always assigned the Accessor ID of 00000000-0000-0000-0000-000000000002, regardless of what cluster you are working on?A . anonymous token B. Consul DNS token C. master token D. the second token created by the userView AnswerAnswer: A Explanation: The anonymous token is used when a request is made to...

Consul has many default ports that are used for communication. What port does Consul use as the default port for the UI and API interfaces?A . tcp/8600 B. tcp/8200 C. tcp/8500 D. udp/8500View AnswerAnswer: C Explanation: The default port for Consul API and UI interface is tcp/8500. This can be...

The Consul security/threat model includes many guiding principals to ensure the protection of the Consul service. Which of the following statements are true in regards to the security/threat model? (select three)A . all servers must join the cluster to begin participating in Raft B. verify_outgoing should be enabled, at a...

True or False? Once created, the bootstrap token should be saved in a secure place, as it can never be replaced without reinstalling the Consul server.A . true B. falseView AnswerAnswer: B Explanation: While the bootstrap token should be protected at all costs, it can actually be reset if the...

True or False? Assuming the service is running, the health check defined with the service definition below will report that the service is healthy and traffic will be directed to web-server-a for the service named web. A . false B. trueView AnswerAnswer: A Explanation: In this service definition, the service...

What command below can be used to display the participating servers and clients within the local Consul cluster?A . consul info B. consul validate C. consul monitor D. consul membersView AnswerAnswer: D Explanation: The members command outputs the current list of members that a Consul agent knows about, along with...

Based upon the DNS query output below, select the answers below which are true statements. (select three) A . the retail service is currently unhealthy and no nodes are available B. the retail service is running on the same host that has been queried C. the retail service is running...