Skip to content
CA-003
Secure agent communication
medium
Question 1 of 24

A Consul operator configures TLS with verify_server_hostname = true in the agent configuration. What does this setting enforce?

AAll agents verify each other's certificate is signed by the cluster CA
BConsul verifies that the server certificate's Subject Alternative Name (SAN) matches the expected hostname in the format server.<datacenter>.consul
CAll agents are required to present a client certificate signed by the CA
DAgents only accept TLS connections from clients with a valid token

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion