Question 1

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

command:

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

Options :

A : the default behavior of the command issued is allow

B :

the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

C : the services are communicating over HTTP rather than HTTPS

D : there is an identical intention that is permitting the connectivity

Answer: A

Question 2

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

Options :

A : all servers, including servers in all Consul federated datacenters

B : clients within the local Consul datacenter

C : servers within the local Consul datacenter

D : both clients and servers within the local Consul datacenter

Answer: C

Question 3

Complete the sentence:

The main restriction on Consul's K/V store is an object's size, which can be a maximum of _______?

Options :

A : 512KB

B : 8KB

C : 64KB

D : 1MB

Answer: A

Question 4

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

Options :

A : Raft (Paxos)

B : Discovery chain

C : Serf (SWIM)

D : Prepared Queries

Answer: C

Question 5

Complete the sentence using the correct answer below:

When authentication is enabled, a Consul token should be provided to make API requests using the ___________ or ___________ header

Options :

A : X-Consul-Token

B :

ACL_Token

C : Consul_Token

D :

Token

E : Authorization: Bearer

Answer: A

Free Consul-Associate Mock Exam – Practice Online Confidently

Buying Options: