Consul 1.15 Practice Test 5 — 25 Questions

Question 1

What is the purpose of the 'upstreams' block in a service definition?

Accepted Answer

To configure the outbound dependencies of the service.. It defines the targets that the sidecar proxy should be allowed to proxy requests to.

Answer

To set the service's health check interval.

Answer

To limit the total number of connections.

Answer

To define the ingress rules.

Question 2

What is the 'Consul Connect proxy' kind used for?

Accepted Answer

To mark a service definition as a sidecar proxy.. It defines a service that is explicitly a sidecar proxy.

Answer

To define a gateway.

Answer

To define the service that the proxy runs in front of.

Answer

To enable mTLS for the service.

Question 3

Which THREE of the following are components of a Consul Connect service definition?

Accepted Answer

proxy. Connect services typically use 'proxy', 'upstreams', and 'connect' blocks to define their behavior in the mesh.

Answer

acl_policy

Answer

kv_store

Question 4

Which THREE tasks are performed by the Consul agent for Connect?

Accepted Answer

Managing sidecar proxy processes.. The agent manages proxy lifecycle, certificate retrieval, and service discovery for the mesh.

Answer

Writing configuration to the disk.

Answer

Issuing certificates.

Question 5

Which THREE settings are part of the 'proxy' configuration block?

Accepted Answer

upstreams. Proxy config includes local bind ports, configuration for Envoy, and upstream definitions.

Answer

acl_token

Answer

service_name

Question 6

Which TWO are common use cases for Consul Connect?

Accepted Answer

Zero-trust networking.. Consul Connect is commonly used for secure service communication and service discovery in complex environments.

Answer

Managing server hardware.

Answer

Creating virtual machines.

Answer

Configuring network switches.

Question 7

Which command line tool can you use to manually trigger a TTL check update for a specific service?

Accepted Answer

curl -X PUT http://localhost:8500/v1/agent/check/pass/checkID. The 'consul monitor' is for logs, but to update a check via CLI, one typically interacts with the HTTP API or uses the 'consul kv' command if applicable, but specifically for TTL, the HTTP API endpoint '/v1/agent/check/pass' is the standard method.

Answer

consul kv put

Answer

consul agent -check-update

Answer

consul health update

Question 8

You have implemented a leader election mechanism using Consul KV sessions. The session has a TTL of 15 seconds. If the application crashes, how long will it take for the lock to be automatically released?

Accepted Answer

15 seconds.. When a session has a TTL, the lock is released when the session is invalidated by the health check failure. The default session invalidation is tied to the TTL.

Answer

Immediately.

Answer

60 seconds.

Answer

The lock is never released until manually deleted.

Question 9

When a session is associated with a lock, what happens to the lock if the session is deleted?

Accepted Answer

The lock is released.. Deleting a session immediately releases any locks associated with that session.

Answer

The lock remains held by the server.

Answer

The lock is held until the key is deleted.

Answer

The lock transfers to a new session.

Question 10

Which of the following best describes the 'consul agent -dev' mode in relation to service discovery?

Accepted Answer

It provides a single-node Consul environment for testing.. Dev mode is for testing and has ephemeral storage.

Answer

It disables DNS interfaces.

Answer

It forces the service catalog to be stored in Redis.

Answer

It is suitable for production clusters.

Question 11

Which command is used to check the status of a registered service?

Accepted Answer

consul health service. 'consul catalog' or 'consul health' commands are used for status inspection.

Answer

consul check

Answer

consul status

Answer

consul list

Question 12

Which THREE of the following are valid ways to categorize services in Consul?

Accepted Answer

Metadata (meta). Tags, meta fields, and namespaces are ways to group services.

Answer

IP subnets

Answer

Port ranges

Question 13

Which of the following are valid types of health checks in Consul? (Select TWO)

Accepted Answer

TCP. Consul natively supports HTTP, TCP, Script, and TTL checks.

Answer

ICMP

Answer

UDP

Answer

SNMP

Question 14

You need to retrieve the session information for a specific session ID. Which endpoint should you query?

Accepted Answer

/v1/session/info/:id. The /v1/session/info/:id endpoint returns the details of a specific session.

Answer

/v1/session/read/:id

Answer

/v1/kv/session/:id

Answer

/v1/session/get/:id

Question 15

You need to register a health check that triggers an alert when memory usage is high. Which type of check is most appropriate?

Accepted Answer

Script Check. A script check can execute a local binary or script to monitor memory and return an exit code.

Answer

gRPC Check

Answer

HTTP Check

Answer

TCP Check

Question 16

When configuring mTLS in Consul Connect, how are certificates distributed to the sidecar proxies?

Accepted Answer

The agent fetches them from the server and provides them via the Envoy xDS API.. The Consul agent, acting as the client to the Consul server, fetches the certificates and provides them to the proxy via the xDS API.

Answer

They are hardcoded in the service definition.

Answer

Via an external secret management service only.

Answer

Via a shared disk volume.

Question 17

What happens if you do not specify an 'interval' for a health check in the configuration?

Accepted Answer

The configuration will fail to load. The 'interval' is a required field for periodic health checks; the agent will fail to load the configuration without it.

Answer

It inherits the agent's check interval

Answer

It defaults to 10 seconds

Answer

It runs once and stops

Question 18

What components can affect the outcome of a health check? (Select THREE)

Accepted Answer

Network connectivity. Network, agent configuration, and application responsiveness all affect health check outcomes.

Answer

Client browser

Answer

Consul server uptime

Question 19

An application is using Consul KV to store configuration. You notice that the KV store is becoming large. What is the most efficient way to retrieve only the keys under the prefix "service/web/"?

Accepted Answer

Use the recurse=true parameter in the query string.. The recurse parameter allows the KV API to return all keys with a matching prefix, rather than just the single key specified.

Answer

Set the depth parameter to 1.

Answer

Use the index parameter with value 0.

Answer

Use the keys parameter with the prefix.

Question 20

You are using Consul Template to observe health status. What happens to a service's health check status if the network segment between the agent and the server is partitioned and the server cannot contact the agent?

Accepted Answer

It enters a critical state. If a server cannot reach the agent performing the check, the health status becomes unknown or unreachable, often reflected as a critical status for the service until connectivity is restored.

Answer

It is automatically removed from the catalog

Answer

It remains passing

Answer

It stays in the last known state