HashiCorp Certified: Consul Associate (003) Questions and Answers
200 questions organized by topic with detailed explanations
HashiCorp
CA-003
200 questions
10 topics
Updated May 2026Service networking fundamentals
12 questions5 easy7 medium~6% of exam
A platform team wants to restrict which services can communicate with each other inside a Consul service mesh using iden...A network engineer is evaluating Consul gateways. They need to allow services inside the Consul service mesh to send req...Which term best describes Consul's ability to automatically detect and track the location of services running in a dynam...
Consul architecture
20 questions5 easy8 medium7 hard~10% of exam
An operations team runs Consul across VM and Kubernetes clusters. They want to add read scalability and redundancy to th...A Consul datacenter has five server nodes. How many server failures can the datacenter tolerate while still maintaining ...A DevOps engineer is designing a highly available Consul cluster for a production environment. According to HashiCorp's ...
Consul datacenter deployment
20 questions7 easy12 medium1 hard~10% of exam
An operations team is automating the join process for new Consul agents in a cloud environment without hardcoding IP add...A Consul operator is configuring a new datacenter. They want to pass configuration to the Consul agent using a file that...A Consul operator is deploying a server agent and needs to specify configuration parameters. They have set `data_dir` an...
Service discovery and registration
28 questions7 easy15 medium6 hard~14% of exam
A team registers services using configuration files in Consul's configuration directory. After adding a new service defi...A service registered with Consul has three instances across two availability zones. A prepared query is configured to pr...An application developer wants to query the Consul service catalog for all healthy instances of the `api` service using ...
Consul service mesh
32 questions5 easy15 medium12 hard~16% of exam
A platform engineer deploys a Consul service mesh and wants to enforce mTLS for all service-to-service communication. Th...What is the default sidecar proxy used by Consul service mesh to handle all inbound and outbound traffic for a registere...An operator configures an upstream block in a sidecar proxy registration for the `frontend` service. The upstream points...
Secure agent communication
24 questions6 easy10 medium8 hard~12% of exam
A Consul operator configures TLS with `verify_server_hostname = true` in the agent configuration. What does this setting...An operator wants to rotate the gossip encryption key in a running Consul datacenter without causing any downtime. Which...A Consul cluster is configured with gossip encryption. A new agent is being added to the datacenter. Which statement abo...
Access control lists (ACLs)
24 questions6 easy11 medium7 hard~12% of exam
A security engineer needs to assign multiple ACL policies to a single Consul token so that a service identity has all th...Which command initializes the Consul ACL system for the first time and returns the initial management token?A Consul operator wants to run CLI commands without specifying a token on every command. Which environment variable shou...
Multi-datacenter connectivity
16 questions2 easy10 medium4 hard~8% of exam
A platform team uses WAN federation to connect three Consul datacenters: dc1, dc2, and dc3. Services in dc1 need to comm...A Consul operator manages two independent Consul datacenters and wants services in one datacenter to discover and connec...An operator wants to connect two Consul service meshes managed by different teams, each running a separate Consul cluste...
Consul observability
12 questions4 easy6 medium2 hard~6% of exam
A site reliability engineer notices that Consul server performance has degraded. They want to stream Consul server logs ...A team wants to view metrics about their Consul service mesh data plane, such as request rates and error rates between s...An operator wants to capture an audit trail of all operator actions performed against the Consul HTTP API, such as token...
Consul operations and maintenance
12 questions5 easy6 medium1 hard~6% of exam
A Consul operator wants to create a point-in-time backup of the Consul cluster state, including ACL tokens, KV data, and...A Consul administrator needs to collect a comprehensive diagnostic bundle from a running Consul agent for offline troubl...A Consul operator is performing a rolling upgrade of a five-node Consul server cluster from version 1.14 to 1.15. Accord...
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | An operations team is automating the join process for new Consul agents in a cloud environment witho... | Consul datacenter deployment | medium |
| 2 | A security engineer needs to assign multiple ACL policies to a single Consul token so that a service... | Access control lists (ACLs) | hard |
| 3 | A Consul operator configures TLS with `verify_server_hostname = true` in the agent configuration. Wh... | Secure agent communication | medium |
| 4 | A team registers services using configuration files in Consul's configuration directory. After addin... | Service discovery and registration | medium |
| 5 | An operations team runs Consul across VM and Kubernetes clusters. They want to add read scalability ... | Consul architecture | hard |
Sign in to see all 200 questions
Create a free account to browse all questions — completely free during our launch phase.
Ready to test your knowledge?
Take a full HashiCorp Certified: Consul Associate (003) practice test with timed exam simulation.
Start Practice Test