Free HashiCorp Consul-Associate Practice Exams Questions 2026  - TheExamsLabs

You have two Consul datacenters and you want to enable federation so services in dc1 can discover services in dc2. You run the consul join wan node2.example.com.However, servers in dc1 can not communicate with servers in dc2 and vice versa. Based on the snippets of the server configuration files can be found below, why wouldthis be assuming network connectivity is working as expected?dc1 configuration1. "datacenter": "dc1",2. "server": true,3. "key_file": "/etc/consul.d/cert.key",4. "cert_file": "/etc/consul.d/client.pem",5. "ca_file": "/etc/consul.d/chain.pem",6. "verify_incoming": true,7. "verify_outgoing": true,8. "verify_server_hostname": true,9. "ui": true,10. "encrypt": "XIUEktl3YjG9KPJfaBU1xE69IZ0XhsNCSH423FyknJE=",11. "bootstrap_expect": 5,12. "enable_syslog": true,dc2 configuration1. "datacenter": "dc2",2. "server": true,3. "key_file": "/etc/consul.d/cert.key",4. "cert_file": "/etc/consul.d/client.pem",5. "ca_file": "/etc/consul.d/chain.pem",6. "verify_incoming": true,7. "verify_outgoing": true,8. "verify_server_hostname": true,9. "ui": true,10. "encrypt": "LSBSOZI5+9EX/kdY8u27mX50rk1ywcprfUCoSZjnpUg=",11. "bootstrap_expect": 5,12. "enable_syslog": false,

You have created a new gossip encryption key using consul keygen and installed it using the command consul keyring -installTX/1dsj67x/4XdTeSG1Cb5RdC/cbAbv9Hch4H8cL8nk=.However, when you try and delete the original gossip encryption key, you receive an error. Based on the error message below, what steps need to be taken in order to beable to remove the old gossip encryption key?1. $ consul keyring -remove /d+jMNoQWICjMvddXJXzyGPDWiEOFgApvUJcuPRcves=2.3. ==> Removing gossip encryption key...4. error: Unexpected response code: 500 (12 errors occurred:5. * WAN error: 5/5 nodes reported failure6. * CONSUL-NODE-A.dc-1: Removing the primary key is not allowed7. * CONSUL-NODE-C.dc-1: Removing the primary key is not allowed8. * CONSUL-NODE-B.dc-1: Removing the primary key is not allowed9. * CONSUL-NODE-D.dc-1: Removing the primary key is not allowed10. * CONSUL-NODE-E.dc-1: Removing the primary key is not allowed11. * dc-1 (LAN) error: 5/5 nodes reported failure12. * CONSUL-NODE-E: Removing the primary key is not allowed13. * CONSUL-NODE-A: Removing the primary key is not allowed14. * CONSUL-NODE-D: Removing the primary key is not allowed15. * CONSUL-NODE-B: Removing the primary key is not allowed16. * CONSUL-NODE-C: Removing the primary key is not allowed

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the followingcommand:$ consul intention create customer-db paymentHowever, the two services can still initiate new connections even after the intention is created. What would explain this?

You are using the Consul KV store and need to be able to easily list all of the keys in a given path. What is the easiest way to do so?

Given the following screenshot, what path would you use to access the value shown?