HCCAO-003 Practice Online

Question 1

Scenario: You're deploying Consul in a dedicated environment, and due to the complex network layout, you are forced to funnel traffic through a firewall that will perform

a NAT (network address translation) for the Consul node. What configuration parameter can be used to identify what IP address that the other nodes in the cluster should

use to communicate with Consul?

A :

-client

B :

-bind

C :

-serf-lan-bind

D : -advertise

Answer: D

Question 2

Which of the following are benefits of using Consul for service discovery? (select 3)

A :

simplified communication between microservices

B : duction or elimination of load balancers for east/west traffic

C : ngle point of contact for a service where the underlying containers may be dynamic or frequently change

D : heduling of services and containers for application redundancy

Answer: A,B,C

Question 3

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

A : ft (Paxos)

B : covery chain

C : rf (SWIM)

D : epared Queries

Answer: C

Question 4

You have a Consul cluster running production workloads in your environment. However, you've discovered that the cluster was initially deployed without gossip

encryption configured, which means that traffic is being sent in cleartext. The security team has requested this to be updated ASAP. However, you can't take an outage on

the Consul service right now, knowing the server nodes will stop communicating once you start editing the configuration files one by one.

How can you enable gossip encryption on the existing cluster without affecting the services it is currently providing the business?

A :

Generate the new encryption key using consul keygen. Update all the Consul server agent configuration files with the new encryption key. Using a scheduling tool,

execute the consul reload command for all nodes at the same time. This will ensure that there is minimal downtime for the Consul service.

B :

Generate the new encryption key using consul keygen. Update each Consul agent configuration file with the new configuration and set additional parameters to

verify incoming and outgoing encryption to false. Use rolling updates to walk through the steps of ultimately setting the parameters to true.

C :

Generate the new encryption key using consul keygen. Use the command consul keyring -install <key> and push the new encryption key out to all participating

nodes in the cluster. Finally, use the command consul keyring -use <key> to instruct Consul to use the key for encryption

D :

Generate the new encryption key using consul keygen. Update the Consul server agent configuration files with the new encryption key and issue a kill -HUP

<process ID> command so the Consul service reloads and picks up the new gossip configuration. Update and restart as a rolling update across the cluster so only a

single node is offline at a time.

Answer: B

Question 5

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

A : l servers, including servers in all Consul federated datacenters

B : ients within the local Consul datacenter

C : rvers within the local Consul datacenter

D : th clients and servers within the local Consul datacenter

Answer: C

Name:	HashiCorp Certified: Consul Associate (003)
Exam Code:	HCCAO-003
Certification:	Consul Associate
Vendor:	HashiCorp
Total Questions:	174
Last Updated:	Jan 08, 2025

Download Demo HCCAO-003 Dumps

Create Account

Password Recovery

HCCAO-003 Practice Online

Download Demo HCCAO-003 Dumps

Member Login

Create Account

Password Recovery

HCCAO-003 Practice Online