troubleshooting

Which THREE items are required to configure an upstream service?

What is the default value for the Consul KV flags field if not provided during a write?

Which Consul agent configuration parameter defines the KV store file location when running locally?

You need to perform a write operation to the Consul KV store that only succeeds if the current ModifyIndex of the key is zero. Which parameter should you include in your API call?

You are configuring a service check that needs to be ignored if the node is in maintenance mode. What is the correct approach?

Which interface would you use to register a service dynamically using standard tools like 'curl'?

Which TWO of the following are benefits of using Consul Connect?

Which THREE of the following represent potential bottlenecks for Consul KV performance?

You are monitoring service health using Consul and want to ensure that a service is automatically removed from the catalog if it remains in a 'critical' state for more than 24 hours. Which configuration key supports this?

You need to register a health check that triggers an alert when memory usage is high. Which type of check is most appropriate?

Which TWO of the following are consequences of a primary datacenter outage in a federated environment?

You need to register a service that runs on a dynamic port. How should the service definition be configured to allow Consul to detect the port?

A cross-datacenter service discovery request is failing. You observe the local datacenter can resolve the service via DNS, but the remote datacenter cannot. Which configuration parameter must be checked?

You are troubleshooting a partition between two datacenters. The WAN gossip shows high latency. Which Consul CLI tool provides the best insight into the WAN gossip state?

You observe that a session lock is being released unexpectedly. What is the most likely cause?

If you need to perform an HTTP check over HTTPS, what configuration option is required to handle self-signed certificates?

Which command displays all active intentions in the Consul mesh?

Which THREE tasks are performed by the Consul agent for Connect?

You need to ensure a service instance is removed from the catalog immediately after the service process terminates. Which setting helps?

What is the purpose of the 'Behavior' field when creating a Consul session?

Which TWO are common use cases for Consul Connect?

When configuring ACL replication, where must the 'acl_replication_token' be defined?

A service definition includes a 'meta' block. What is the intended use of this block?

You are troubleshooting a connection error where the sidecar proxy cannot reach the upstream service. Which log file provides the most detail regarding Envoy's connectivity issues?

Which status indicates that a health check is successfully passing according to Consul?

What is the function of the 'consul intention check' command?

Which THREE of the following are valid check types in Consul?

How does Consul handle service discovery in multi-datacenter environments when a service is requested by name?

Which service definition field is used to link a sidecar proxy to its parent service?

How do you enable WAN federation between two Consul datacenters that do not share a network?

Which HTTP method is used to create or update a key in the Consul KV store?

You need to verify if a node has successfully joined the cluster for service discovery. Which tool confirms this?

Which THREE of the following are valid ways to register a service in Consul?

You have configured a Script health check that executes a shell command. For security reasons, you want to restrict which scripts the Consul agent can run. What configuration setting must be set to 'false' in the agent configuration to disable script checks entirely?

When configuring a Service-specific health check, what is the impact of setting the 'expose' field to true?

What is the role of a Consul server in a non-primary datacenter regarding ACLs?

What is the recommended approach for running health checks on a service that is part of a non-containerized, multi-process architecture?

If a service has multiple health checks associated with it, when is the service itself considered 'critical'?

What does the 'kind' field in a service definition specify for a Consul Connect service?

Which TWO of the following are features of Consul Connect native integration?

Which THREE of the following fields are returned in a typical Consul KV API GET response?

Which THREE factors influence the mTLS handshake in a Consul Connect mesh?

Which THREE network considerations are vital for Consul WAN federation?

Which Consul feature allows you to perform health checks against a service that does not have an exposed HTTP endpoint but resides on the same machine?

You are configuring a Consul Watch to trigger a script whenever a specific KV key changes. Which type of watch should you define in your configuration file?

Which command-line interface command is used to set a value in the Consul KV store?

Which of the following is a key feature of Consul Connect's intentions?

What is the impact of setting 'enable_tag_override' to true in a service definition?

When using Consul DNS for a service, what happens if no instances are healthy?

You need to ensure that a service is only discoverable via DNS if it passes its health checks. Which configuration setting in the service definition achieves this?

Which THREE of the following are true about Consul KV keys?

Which TWO of the following are true regarding the Consul Service Catalog?

You want to delete a key and all its children in the KV store using the CLI. Which flag should you use?

What is the primary benefit of using a Mesh Gateway in a Consul Connect architecture?

Which Consul API endpoint is used to create a new session that can be used for locking KV keys?

Which THREE settings are part of the 'proxy' configuration block?

In a multi-datacenter environment, what happens if the 'primary_datacenter' server cluster becomes unavailable?

When a service check transitions to 'critical', what does Consul do with the service's DNS entry?

When using the Consul KV store, what is the maximum size allowed for a single value in a key?

When providing a session TTL, what is the minimum duration allowed?

To verify if two datacenters are connected via WAN, which command shows the remote datacenter's server nodes?

Which TWO of the following are standard DNS records returned by Consul for service discovery?

You need to perform a canary deployment for a service. What Consul feature should you use?

What information does the Consul HTTP API return for a health check? (Select TWO)

Which of these are required fields for a TCP health check definition? (Select THREE)

What is true about Consul health checks? (Select TWO)

Which TWO of the following are valid ways to configure Consul Connect?

When multiple agents are in a cluster, how does Consul ensure that service discovery information is consistent across all nodes?

What happens if you try to write to a key that is currently locked by a session you do not own?

What is the benefit of using a Mesh Gateway in a multi-datacenter deployment with overlapping IP space?

Which HTTP status code range does Consul interpret as a passing state for an HTTP health check?

An operator observes that a service is failing its HTTP health check because the application takes 15 seconds to start up, exceeding the default timeout. Which parameter should be adjusted in the service definition to prevent premature failure?

When troubleshooting a failing health check, which tools are recommended? (Select TWO)

When configuring mTLS in Consul Connect, how are certificates distributed to the sidecar proxies?

You need to ensure that a read operation from the KV store is strongly consistent. Which consistency mode should you specify?

Which states can a health check report? (Select THREE)

You want to ensure that specific services in a remote datacenter are only accessible to certain local services. How can you achieve this?

A service in datacenter A needs to call a service in datacenter B. If 'prepared_queries' are not used, how does the service discovery query look?

You have a service that needs to talk to a service in a different datacenter. What configuration is required?

Which flag can be used to pass arbitrary metadata to a KV entry?

What is the default port used for WAN gossip between Consul servers?

Which THREE of the following are standard Consul KV CLI subcommands?

When configuring an ACL policy for cross-datacenter access, what policy rule is necessary to read service information from a remote datacenter?

Which TWO of the following are valid ways to trigger a KV watch?

Which TWO of the following are prerequisites for successful WAN federation?

If you are using SPIRE for certificate management, how does this interact with Consul Connect?

Which TWO of the following statements are true about the 'passing' parameter in DNS queries?

Which THREE configuration items are part of a complete WAN gossip setup?

What happens to the gossip protocol if the 'encrypt' key is mismatched between two datacenters trying to join via WAN?

Which TWO of the following are valid ways to monitor Consul Connect performance?

When joining a new datacenter to an existing WAN pool, what is the best practice for server versions?

Which THREE of the following fields are typically included in a service metadata (meta) block?

An administrator needs to query service information. Which DNS record type is commonly used by Consul to return service addresses?

A service has a TTL check configured with a 30-second TTL. If the application crashes and stops sending heartbeats, when will the service status change to 'critical'?

Which TWO of the following can be used to filter services during a DNS query?

Which TWO of the following are valid ways to troubleshoot inter-datacenter communication issues?

What is the purpose of the 'service-tag' in a Consul service definition?

A service 'api' is configured with mTLS. You want to rotate the CA root certificate without interrupting existing connections. What is the recommended strategy?

Which TWO of the following are true regarding Consul KV watches?

When defining a TCP health check, what is the primary indicator that the check is 'passing'?

What is the function of the 'retry_join_wan' configuration?

You are using a Consul Watch to monitor KV changes. What does the 'handler' field specify?

What is the purpose of the 'datacenter' field in the Consul agent configuration?

When a health check is failing, which Consul API endpoint would you call to investigate the specific error message provided by the check?

Which THREE items are required when configuring ACL replication in Consul?

Which component acts as the default sidecar proxy for Consul Connect?

Which TWO of the following describe a Consul 'service definition'?

What is the purpose of the 'upstreams' block in a service definition?

You are joining two Consul datacenters via WAN gossip. Which command must be executed on a Consul server in the secondary datacenter to initiate the federation?

When a session is associated with a lock, what happens to the lock if the session is deleted?

Which TWO of the following are true about the 'cas' parameter in KV writes?

Which THREE items are included in the metadata shared via WAN gossip?

A service is intermittently failing to resolve via DNS because it has multiple health checks, some of which are 'warning'. How do you ensure it is only returned when all checks are 'passing'?

What happens to a session if the associated node is marked as 'failed' by the Consul health check?

Which THREE features are critical for maintaining ACL consistency across datacenters?

Which actions can you perform on a TTL check? (Select TWO)

Which THREE of the following are valid ways to categorize services in Consul?

When using 'Consul Connect native' integration, how does the application handle mTLS?

You have enabled ACL replication between a primary and secondary datacenter. What is the effect of changing an ACL policy in the primary datacenter?

You observe a 'warning' status for a service. What is the most common reason for this?

What command displays the currently registered services in the local agent?

You want to perform a blocking query on a KV key to watch for updates. Which parameter must you provide in your request based on the last observed index?

You have a service that requires specific routing logic based on the environment. How can you distinguish between 'production' and 'staging' instances of the same service name using metadata?

What is the primary role of the Consul Connect 'upstream' configuration?

When using Consul KV for distributed locking, why is it recommended to use a session?

How does Consul handle service discovery when using the 'prepared query' feature?

What is the primary difference between a 'script' check and an 'http' check in terms of how they are processed by the Consul agent?

Which TWO statements are true regarding Consul Mesh Gateways?

What is the correct way to specify a local bind port for an upstream service?

Which of the following are true regarding TTL checks? (Select TWO)

Where can you define health checks in Consul? (Select THREE)

An application is using Consul KV to store configuration. You notice that the KV store is becoming large. What is the most efficient way to retrieve only the keys under the prefix "service/web/"?

If a KV operation returns a 403 Forbidden status, what is the most common cause?

How do you enable mTLS globally in a Consul datacenter?

Which file format is used for Consul configuration?

How are intentions applied to services in different partitions or namespaces?

Which TWO of the following actions occur when a node fails in a Consul cluster?

Which TWO of the following are true about Consul datacenters?

You need to deny all traffic between 'service-a' and 'service-b' using intentions. What is the most efficient way to achieve this?

You have implemented a leader election mechanism using Consul KV sessions. The session has a TTL of 15 seconds. If the application crashes, how long will it take for the lock to be automatically released?

Which THREE factors influence cross-datacenter service discovery resolution?

If a Consul agent is configured with 'disable_remote_exec = true', how does this affect the KV store?

You want to run a shell command as a health check. Which field in the service definition specifies the command to execute?

Which THREE of the following are valid session behaviors when a session is invalidated?

You are using Consul Template to observe health status. What happens to a service's health check status if the network segment between the agent and the server is partitioned and the server cannot contact the agent?

Which of the following are valid types of health checks in Consul? (Select TWO)

Which of the following best describes the 'consul agent -dev' mode in relation to service discovery?

When using 'prepared_queries' for cross-datacenter failover, what does the 'failover' block allow you to specify?

Which file format is primarily used for defining services in Consul?

In a Consul health check, what does the 'notes' field provide?

Which THREE of the following are components of a Consul Connect service definition?

You notice that the KV store is not consistent across datacenters. What is the cause?

Which command line tool can you use to manually trigger a TTL check update for a specific service?

Which TWO of the following are true regarding the behavior of the Consul KV store?

Which configuration file format is preferred by Consul for defining service health checks?

Which protocol is used for the control plane communication between the Consul agent and the sidecar proxy?

Which of the following is a valid method to update a TTL health check?

You need to retrieve the session information for a specific session ID. Which endpoint should you query?

When using multiple datacenters, what is the primary role of the 'consul-template' tool?

If you are running Consul Enterprise, what feature simplifies the management of cross-datacenter secrets?

Which command is used to check the status of a registered service?

You are troubleshooting a health check that seems to be hanging. Which flag, if available, would provide more information about the check's execution within the agent logs?

Which THREE of the following are key components of a service definition?

You are querying the Consul DNS interface for a service. How can you exclude specific tags from the results?

You are troubleshooting why a service registered via HTTP API is not showing up in the catalog. Which tool provides the most immediate insight into the registration status?

What is the recommended number of Consul servers per datacenter to ensure high availability?

Which protocol do Consul servers use to maintain the WAN gossip pool?

Which agent configuration allows you to specify the local address that the Consul agent binds to for performing health checks?

What is the function of the 'consul connect envoy' command?

When using the HTTP health check type, how can you verify that a specific header is included in the health check request?

What is the effect of changing the 'interval' parameter in a service health check?

Which THREE of the following are benefits of using the Consul DNS interface?

When troubleshooting a service that fails to start its Envoy proxy, which service definition field should you check for incorrect configuration?

What components can affect the outcome of a health check? (Select THREE)

Which TWO of the following are true regarding intentions?

Which feature allows you to define a health check that depends on the health of another service?

You want to perform a list operation on a KV prefix to see all keys, but you don't want the values returned. Which API parameter helps reduce payload size?

Which Consul feature allows you to observe the KV store for changes and run a command in response?

Which THREE of the following are supported as sidecar proxy types in Consul?

What is the purpose of the 'check' field inside a 'service' object in a Consul configuration file?

Which THREE of the following are required to successfully acquire a lock on a KV key?

What is the consequence of having a service with no health checks registered?

Which file path is standard for storing the Consul server configuration, including WAN settings?

What happens if a service proxy loses its connection to the local Consul agent?

Which of the following conditions can cause a health check to transition to the 'critical' state? (Select TWO)

What happens if you do not specify an 'interval' for a health check in the configuration?

An administrator wants to register a service using a JSON file. Where should this file be placed on a standard Consul agent installation to ensure automatic loading?

Which TWO of the following are common use cases for the Consul KV store?

Which CLI command would you use to check the status of a Connect-enabled service?

What is the 'Consul Connect proxy' kind used for?

Which THREE of the following are valid Consul health check statuses?

Which TWO of the following accurately describe Consul's WAN gossip protocol behavior?

You are deploying a legacy application that does not support HTTP or TCP health checks. Which Consul health check type should you configure to allow the application to signal its own health via a heartbeat API call?

You are configuring a sidecar proxy for a service named 'web'. Which configuration stanza in the service definition correctly defines the proxy's inbound port for Connect traffic?