Consul 1.15 Service Mesh With Consul Connect Practice Test 2 — 15 Questions

Question 1

Which service definition field is used to link a sidecar proxy to its parent service?

Accepted Answer

destination_service_name. The 'proxy' block inside the 'service' definition contains the 'destination_service_name' to link it.

Answer

parent_service

Answer

service_id

Answer

linked_service

Question 2

What happens if a service proxy loses its connection to the local Consul agent?

Accepted Answer

The proxy enters a 'stale' state and uses the last known config.. The proxy will be unable to receive configuration updates and health status, potentially leading to service disruption.

Answer

The proxy shuts down automatically.

Answer

The proxy automatically switches to a local health-check mode.

Answer

The proxy attempts to connect to a random Consul server.

Question 3

Which CLI command would you use to check the status of a Connect-enabled service?

Accepted Answer

consul health service <name>. The 'consul catalog services' or 'consul health service' command shows the status, including Connect capabilities.

Answer

consul status

Answer

consul connect status

Answer

consul proxy check

Question 4

What is the primary benefit of using a Mesh Gateway in a Consul Connect architecture?

Accepted Answer

It enables communication between services in different datacenters.. Mesh gateways provide a single point of ingress/egress for cross-datacenter traffic, reducing the need for direct cross-DC networking.

Answer

It encrypts traffic at the storage layer.

Answer

It improves local mTLS performance.

Answer

It provides load balancing for local services.

Question 5

What is the purpose of the 'upstreams' block in a service definition?

Accepted Answer

To configure the outbound dependencies of the service.. It defines the targets that the sidecar proxy should be allowed to proxy requests to.

Answer

To set the service's health check interval.

Answer

To limit the total number of connections.

Answer

To define the ingress rules.

Question 6

Which of the following is a key feature of Consul Connect's intentions?

Accepted Answer

Service authorization (allow/deny).. Intentions provide a logical authorization layer for service-to-service communication.

Answer

Global load balancing.

Answer

Certificate rotation.

Answer

Traffic splitting.

Question 7

What is the correct way to specify a local bind port for an upstream service?

Accepted Answer

upstreams { destination_name = "svc", local_bind_port = 9000 }. Inside the upstream block, the 'local_bind_port' key sets the port the proxy listens on.

Answer

service { upstream = { 9000 } }

Answer

proxy { upstream_port = 9000 }

Answer

upstream { port = 9000 }

Question 8

How do you enable mTLS globally in a Consul datacenter?

Accepted Answer

Set 'connect { enabled = true }' in the agent configuration.. mTLS is enabled by default in modern Consul versions, but can be configured in the agent config via 'connect.enable_connect'.

Answer

Run 'consul tls enable'.

Answer

consul config write -enable-mtls

Answer

There is no global enable setting.

Question 9

When configuring mTLS in Consul Connect, how are certificates distributed to the sidecar proxies?

Accepted Answer

The agent fetches them from the server and provides them via the Envoy xDS API.. The Consul agent, acting as the client to the Consul server, fetches the certificates and provides them to the proxy via the xDS API.

Answer

They are hardcoded in the service definition.

Answer

Via an external secret management service only.

Answer

Via a shared disk volume.

Question 10

You need to perform a canary deployment for a service. What Consul feature should you use?

Accepted Answer

Service splitting via Service Resolver.. Consul's service resolver and router resources allow for traffic splitting between different service subsets.

Answer

KV store manual updates.

Answer

Intentions.

Answer

Service mesh gateway.

Question 11

What is the 'Consul Connect proxy' kind used for?

Accepted Answer

To mark a service definition as a sidecar proxy.. It defines a service that is explicitly a sidecar proxy.

Answer

To define a gateway.

Answer

To define the service that the proxy runs in front of.

Answer

To enable mTLS for the service.

Question 12

What is the function of the 'consul intention check' command?

Accepted Answer

To verify if traffic is allowed between two services.. It tests if a connection between two services is allowed by existing intentions.

Answer

To list all intentions.

Answer

To create a new intention.

Answer

To delete an intention.

Question 13

Which THREE factors influence the mTLS handshake in a Consul Connect mesh?

Accepted Answer

The identity certificate issued to the service.. The CA, the identity certificate, and the trust bundle are all essential to the mTLS handshake.

Answer

The intention status.

Answer

The service health check result.

Question 14

Which TWO of the following are true regarding intentions?

Accepted Answer

They determine allowed service-to-service communication.. Intentions are managed via API/CLI and define allowed communication patterns between services.

Answer

They are automatically synced to all datacenters.

Answer

They operate at the transport layer.

Answer

They require a separate database.

Question 15

When troubleshooting a service that fails to start its Envoy proxy, which service definition field should you check for incorrect configuration?

Accepted Answer

proxy. The 'proxy' configuration block is where all Envoy-specific settings, including ports and upstreams, are defined.

Answer

checks

Answer