Virtual Event
Join us for the next HashiConf Digital October 12-15, 2020 Register for Free

Product Certification Exam Prep

Consul Associate Certification Exam Review

»About the Certification Exam

The Consul Associate certification is for Cloud Engineers specializing in security, development, networking, or operations who know the basic concepts, skills, and use cases associated with open source HashiCorp Consul. Candidates will be best prepared for this exam if they have professional experience using Consul in production, but performing the exam objectives in a personal demo environment may also be sufficient. This person understands what enterprise features exist and what can and cannot be done using the open source offering.


  • Basic terminal skills
  • Basic understanding of on-premise or cloud architecture
  • Basic level of containerization understanding
  • Basic understanding of distributed systems

To learn more about the exam, visit the HashiCorp Product Certifications page.

»Preparing for the Exam

Below are sample exam questions, and a review guide. The review guide will help you quickly find information relevant to exam objectives and review that material before taking the exam. The sample questions give you a feel for the type of questions and format of the exam.

»Sample Exam Questions

The exam consists of multiple choice, multiple answer, true/false, and other question types. Below are some examples so you can familiarize yourself with the exam format.

»1) Which protocol(s) need to be enabled in your network configuration to permit the nodes to communicate over the gossip protocol?

✅ TCP and UDP
❌ gRPC
❌ All of the above

»2) What are the benefits of using the Consul Enterprise feature of adding non-voting servers in a redundancy zone to your Consul datacenter? Choose two correct answers.

✅ Read-scalability
✅ Redundancy
❌ Increase quorum
❌ Segment your network
❌ Disaster recovery

»3) You can query for services using the following HTTP API call.

$ curl http://localhost:8500/v1/catalog/service/web

The following response is returned:

    "ID": "82f64bfa-22c2-5727-0f5d-0bae376f6584",
    "Node": "Judiths-MBP.lan",
    "Address": "",
    "Datacenter": "dc1",
    "TaggedAddresses": {
      "lan": "",
      "wan": ""
    "NodeMeta": {
      "consul-network-segment": ""
    "ServiceKind": "",
    "ServiceID": "web",
    "ServiceName": "web",
    "ServiceTags": ["rails"],
    "ServiceAddress": "",
    "ServiceWeights": {
      "Passing": 1,
      "Warning": 1
    "ServiceMeta": {},
    "ServicePort": 80,
    "ServiceEnableTagOverride": false,
    "ServiceProxyDestination": "",
    "ServiceProxy": {},
    "ServiceConnect": {},
    "CreateIndex": 10,
    "ModifyIndex": 10

You want to retrieve a list of healthy instances of the service. Fill in the blank in the following command:

curl http://localhost:8500/v1/health/service/web______

❌ ?healthy
❌ ?valid-only
❌ ?available=true
✅ ?passing
❌ ?failing=false

»Review Guide

Here is a direct mapping of each HashiCorp Certified: Consul Associate exam objective to where it is covered in HashiCorp's documentation, training, or interactive labs through Katacoda. This provides experienced exam candidates a place to review just the objectives they need extra help with before taking the exam.

1Explain Consul architectureDocumentationTutorial
1aIdentify the components of Consul datacenter, including agents and communication protocolsArchitecture
Reference Architecture
Secure Datacenter
1bPrepare Consul for high availability and performanceArchitecture
Read Scale
Agent Options - non-voting-server
Reference Architecture
Deployment Tutorial
Automated Upgrades
Add & Remove Servers
Redundancy Zones
1cIdentify Consul's core functionalityService Mesh
Service Mesh Use Case
Service Discovery Use Case
Service Discovery with DNS
Network Middleware Automation Use Case
KV Store
KV Store Commands
Service Mesh
KV Store
Service Discovery
Service Mesh
1dDifferentiate agent rolesArchitecture
Service Registration
Secure Datacenter Networking
Reference Architecture
Deployment Tutorial
2Deploy a single datacenterDocumentationTutorial
2aStart and manage the Consul processAgent Options
Running an Agent
Deployment Tutorial
Deploying to Windows
2bInterpret a simple Consul agent configurationAgent Options
2cChoose a method to bind the server to one specific addressAgent Options
Common Errors
Service Mesh
Forward DNS
Address Binding
2dChoose a method for joining existing nodesJoin Command
Join Options
Cloud Auto Join
Auto Join
3Register services and use service discoveryDocumentationTutorial
3aInterpret a simple service registrationServices
3bDifferentiate ways to register a single serviceServices
Agent Options - Reloadable Config
3cInterpret a service configuration with health checkAgent Checks
API - Health
DNS Interface
What is Consul
Health Checks
Troubleshooting - Health Checks
3dCheck the service catalog status from the output of the DNS/API interface or via the Consul UIServices
Agent Options
Download Tools
Web UI
Health Checks
Consul Template
3eIdentify a prepared queryAPI - Query
Geo Failover
3fUse a prepared queryAPI - Query
Geo Failover
4Access the Consul key/value (KV)DocumentationTutorial
4aUnderstand the capabilities and limitations of the KV storeKV
Security - Threat Model
FAQ - Size Limit
KV Store
Monitoring - Memory Usage
4bInteract with the KV store using both the Consul CLI and UIAPI - KV
Commands - KV
KV Store
Web UI
4cMonitor KV changes using watchWatches
Consul Watch command
Semaphores - Management
4dMonitor KV changes using envconsul and consul-templateEnvconsul
Download Tools
Consul Template
5Backup and restoreDocumentationTutorial
5aDescribe the contents of a snapshotSnapshot Command
Options - data_dir
5bRun snapshot save and snapshot restoreSave Snapshot
5c[Enterprise] Describe the benefits of snapshot agent featuresEnterprise Backups
Snapshot Agent
6Register a service proxyDocumentationTutorial
6aUnderstand Consul Connect service mesh high level architectureService Mesh
Service Mesh
Understanding Service Mesh
Understanding Upstream
Secure Services
6bDescribe configuration for registering a service proxyService Registration
Service Definition
Service Mesh
Secure Services
6cDescribe intentions for Consul Connect service meshIntentions
Service Mesh
Zero Trust Network
6dCheck intentions in both the Consul CLI and UIIntentions - Basics
Service Mesh
Web UI
7Secure agent communicationDocumentationTutorial
7aUnderstanding Consul security/threat modelTLS Certificates
Reference Architecture
Update Certificates - Servers
7bDifferentiate certificate types needed for TLS encryptionCommon Errors
Built-In CA
Service Mesh Internals - mTLS
Production Checklist
7cUnderstand the different TLS encryption settings for a fully secure datacenterVerify Server Hostname
Verify Incoming
Verify Outgoing
8Secure services with basic access control lists (ACL)DocumentationTutorial
8aSet up and configure a basic ACL systemACL System
Bootstrap ACL System
Production ACLs
ACL Tutorial
8bCreate simple policiesACL System - Rules and Scope
Managing ACL Policies
8cCombine multiple policies in a single tokenACL System
Managing ACL Policies
8dPerform a CLI request using a tokenCONSUL_HTTP_TOKEN
Create Agent Token
Set Agent Token
Production ACLs
Managing ACL Policies
ACL Tutorial - bootstrap token
8ePerform an API request using a tokenSet Agent Token
ACL Tutorial - bootstrap token
9Use gossip encryptionDocumentationTutorial
9aUnderstanding the Consul security/threat modelSecurity
RPC Encryption with TLS
Deployment Tutorial
Reference Architecture
9bConfigure gossip encryption for the existing data centerEncryption
Agent Options
Agent Encryption
Deployment Tutorial
9cDescribe the importance and cadence of rotating encryption keysCertificate Rotation