CA-003 HashiCorp Certified: Consul Associate (003) Practice Questions
Prepare for CA-003 with more than an answer.
- Exam fee
- $70.5 USD
- Time limit
- 60 minutes
- Questions on the exam
- 57
- Passing score
- 70%
- Level
- Associate
- Valid for
- 2 years
Domains covered on the exam 10
- Understand the Pillars of Service Networking10%
- Describe Consul Architecture12%
- Deploy a Single Datacenter10%
- Register Services and Use Service Discovery12%
- Use Consul Service Mesh12%
- Secure Agent Communication12%
- Secure Services with Basic Access Control Lists (ACLs)12%
- Secure and Connect Service Mesh Applications10%
- Monitor Consul5%
- Operate and Maintain Consul5%
- 1
Analyze the diagram below. What is the specific role of the LAN Gossip Pool in this architecture?
graph TD subgraph Datacenter 1 S1[Server 1] |Raft| S2[Server 2] S2 |Raft| S3[Server 3] S1 |LAN Gossip| C1[Client 1] S2 |LAN Gossip| C2[Client 2] C1 |LAN Gossip| C2 endShow answer details
Correct answer: C
The LAN Gossip pool (Serf) allows all agents (clients and servers) in a datacenter to discover each other and detect failures rapidly without putting load on the servers.
- 2
You are observing a 3-node Consul server cluster. You notice that the 'Last Contact' time for the leader is increasing on the follower nodes. What does this likely indicate about the cluster's health?
Show answer details
Correct answer: C
Raft relies on regular heartbeats. If 'Last Contact' exceeds the heartbeat timeout, followers will presume the leader is dead and initiate a new election, causing instability.
- 3
You are bootstrapping a new Consul datacenter. You have configured
bootstrap_expect = 3in the server configuration. You start the first server agent. What will be the state of the cluster?Show answer details
Correct answer: D
bootstrap_expectinstructs Consul to wait until the specified number of servers are present before attempting to bootstrap the cluster. This prevents split-brain scenarios during initialization. - 4
A platform engineering team is designing a new service networking architecture for a hybrid environment containing both legacy VMs and Kubernetes clusters. They require a solution that provides dynamic service registration, precise health monitoring, and the ability to automate network device updates based on service changes. Which pillar of service networking is primarily addressed by using Consul-Terraform-Sync (CTS) in this architecture?
Show answer details
Correct answer: A
Consul-Terraform-Sync (CTS) specifically addresses the pillar of Network Infrastructure Automation. It monitors the Consul catalog for changes in services (health status, IP addresses) and automatically triggers Terraform runs to update network infrastructure (like firewalls, load balancers) to reflect those changes.
- 5
Which of the following scenarios best illustrates the 'Zero Trust' security pillar implemented by Consul Service Mesh?
Show answer details
Correct answer: D
This describes the core Zero Trust principle in Consul. Identity is based on mTLS certificates (not IP addresses), and the default posture is to deny all traffic unless explicitly authorized by Intentions.
- 6
A solutions architect is explaining the benefits of Consul's service discovery to a client. The client asks how Consul handles dynamic infrastructure where IP addresses change frequently. Which explanation accurately describes Consul's mechanism?
Show answer details
Correct answer: D
Consul acts as a distributed DNS server. When services register or deregister, the catalog is updated immediately. Clients querying the DNS interface receive dynamic, up-to-date records of healthy instances only.
