Question 1

From the options below, select the features that are available in Consul Enterprise, and not available in the open-source offering.

Options :

A :

Connect (service to service authorization and encryption)

B : Autopilot (automated upgrades)

C : Consul snapshot agent (automated backups)

D : OIDC auth method (centralized authentication)

E : Sentinel (Policy as Code)

F :

Namespaces (datacenter isolation)

Answer: A,B,C,D

Question 2

Which of the following security methods does Consul use to secure gossip communication throughout the cluster?

Options :

A : ACLs

B : pre-shared symmetric key

C : TLS certificates

D : mutual TLS certificates

Answer: B

Question 3

You are using the Consul KV store and need to be able to easily list all of the keys in a given path. What is the easiest way to do so?

Options :

A :

consul kv read -recursive

B : consul kv get -recurse

C : consul kv read

D : consul kv get *.*

Answer: B

Question 4

Scenario: You have multiple services registered with Consul for your e-commerce site, including the front-end service, the shipping service, the inventory service, and the

cart service. To safeguard your customer's shipping addresses, you want to ensure that communication between the front-end and the shipping service is denied and that

traffic is only permitted from the cart service.

What feature of Consul Connect can you use to permit access to the shipping service from the cart service and deny communication from the front-end service?

Consul-Associate-Part-2-Q57-page32-image4

Options :

A : Intentions

B : Consul agent

C : Consul ACLs

D : Consul Namespaces

Answer: A

Question 5

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

Options :

A : Raft (Paxos)

B : Discovery chain

C : Serf (SWIM)

D : Prepared Queries

Answer: C