Question 1

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

command:

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

Options :

A : the default behavior of the command issued is allow

B :

the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

C : the services are communicating over HTTP rather than HTTPS

D : there is an identical intention that is permitting the connectivity

Answer: A

Question 2

Stephen is using Consul for service discovery, but he also wants to store data in the Consul K/V for application variables that need to be retrieved at runtime. However,

the application is currently architected to read data directly from a local file, not from a remote K/V service like Consul.

What Consul feature can Stephen use to retrieve data from Consul without re-architecting the application?

Options :

A : consul-template

B :

API

C : consul watch

D : envconsul

Answer: A

Question 3

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

Options :

A : Raft (Paxos)

B : Discovery chain

C : Serf (SWIM)

D : Prepared Queries

Answer: C

Question 4

You are using the Consul KV store and need to be able to easily list all of the keys in a given path. What is the easiest way to do so?

Options :

A :

consul kv read -recursive

B : consul kv get -recurse

C : consul kv read

D : consul kv get *.*

Answer: B

Question 5

Scenario: You have an application that uses Consul service discovery to connect to backend services in order to process data submitted by end-users. The front-end web

service consists of 3 containers, while the backend service consists of 5 static virtual machines. All of the front-end web servers and the backend servers are registered

with Consul.

During normal operations, a user complains that the data processing is taking too long. To troubleshoot, you run a DNS query against the DNS name for the backend

service, but discover that the response only contains three of the virtual machines. Why would Consul only respond with three servers rather than all five?

Options :

A :

the response only included the three underutilized nodes

B :

the DNS query must specify how many nodes to return in the response

C : the health check is failing for the other two servers

D : Consul has a maximum response of three nodes in a given DNS query

Answer: C