Question 1

You have deployed a new Consul cluster to be used for service discovery between your microservices for a new application. In the configuration file, as shown below, you

have enabled ACLs and bootstrapped the ACL system. However, clients are still being permitted to read and write to the ACL system or register services without a valid

token.

Based on the policy, what change needs to be made to finish securing Consul?

1. {

2. "server": true,

3. "node_name": "CONSUL-NODE-A",

4. "datacenter": "DC-1",

5. "data_dir": "/var/consul/data",

6. "bind_addr": "0.0.0.0",

7. "client_addr": "0.0.0.0",

8. "advertise_addr": "10.0.10.208",

9. "bootstrap_expect": 5,

10. "retry_join": ["provider=aws tag_key=consul tag_value=true"],

11. "ui": true,

12. "log_level": "INFO",

13. "acl": {

14. "enabled": true,

15. "default_policy": "allow",

16. "down_policy": "extend-cache"

17. }

18. }

Options :

A : configure the ACL policy for the anonymous token to deny all client requests

B : reload the configuration on all the nodes after the bootstrap token was created

C : update the default_policy across all of the Consul nodes

D : apply the bootstrap token to the other nodes

Answer: C

Question 2

Complete the sentence:

The main restriction on Consul's K/V store is an object's size, which can be a maximum of _______?

Options :

A : 512KB

B : 8KB

C : 64KB

D : 1MB

Answer: A

Question 3

During leadership election, which members in the local datacenter get a vote to elect a new leader?

Options :

A : Consul server nodes

B :

Consul servers and clients

C : Consul servers, read-only server nodes, and clients

D : Consul clients

Answer: A

Question 4

Which of the following is responsible for managing membership and broadcasting messages to the cluster?

Options :

A : Raft (Paxos)

B : Discovery chain

C : Serf (SWIM)

D : Prepared Queries

Answer: C

Question 5

Which of the following are benefits of using Consul for service discovery? (select 3)

Options :

A :

simplified communication between microservices

B : reduction or elimination of load balancers for east/west traffic

C : single point of contact for a service where the underlying containers may be dynamic or frequently change

D : scheduling of services and containers for application redundancy

Answer: A,B,C