Consul Associate: HashiCorp Certified Consul Associate

The Consul Associate Certification is for Site Reliability Engineers, Solutions Architects, DevOps professionals, or other Cloud Engineers who know the basic concepts and skills to build, secure, and maintain open source HashiCorp Consul. Candidates will be best prepared for this exam if they have professional experience using Consul in production, but performing the exam objectives in a personal demo environment may also be sufficient. This person understands what enterprise features exist and what can and cannot be done using the open source offering.

Try Online Exam


  • Containerization knowledge
  • Basic terminal skills
  • Networking skills including load balancing and distributed systems
  • Understand the purpose of ACLs
  • Experience with TLS certificate lifecycle

HashiCorp Consul Associate Exam Summary:

Exam Name HashiCorp Certified Consul Associate (Networking Automation)
Exam Code   Consul Associate
Exam Price   $70 USD 
Duration  60 minutes
Number of Questions   57 
Passing Score   Pass / Fail (Approx 70%) 
Recommended Training / Books   Prepare for the exam 
Schedule Exam   Cloud Engineer Certification Exam Portal
Sample Questions   HashiCorp Consul Associate Sample Questions
Recommended Practice   HashiCorp Certified – Consul Associate Practice Test

HashiCorp Networking Automation Syllabus:

Section Objectives
Explain Consul architecture – Identify the components of Consul datacenter, including agents and communication protocols
– Prepare Consul for high availability and performance
– Identify Consul’s core functionality
– Differentiate agent roles
Deploy a single datacenter – Start and manage the Consul process
– Interpret a Consul agent configuration
– Configure Consul network addresses and ports
– Describe and configure agent join and leave behaviors
Register services and use service discovery – Interpret a service registration
– Differentiate ways to register a single service
– Interpret a service configuration with health check
– Check the service catalog status from the output of the DNS/API interface or via the Consul UI
– Interpret a prepared query
– Use a prepared query
Access the Consul key/value (KV) – Understand the capabilities and limitations of the KV store
– Interact with the KV store using both the Consul CLI and UI
– Monitor KV changes using watch
– Monitor KV changes using envconsul and consul-template
Back up and restore – Describe the content of a snapshot
– Back up and restore the datacenter
– [Enterprise] Describe the benefits of snapshot agent features
Use Consul service mesh – Understand Consul Connect service mesh high level architecture
– Describe configuration for registering a service proxy
– Describe intentions for Consul Connect service mesh
– Check intentions in both the Consul CLI and UI
Secure agent communication – Understanding Consul security/threat model
– Differentiate certificate types needed for TLS encryption
– Understand the different TLS encryption settings for a fully secure datacenter
Secure services with basic access control lists (ACL) – Set up and configure a basic ACL system
– Create policies
– Manage token lifecycle: multiple policies, token revoking, ACL roles, service identities
– Perform a CLI request using a token
– Perform an API request using a token
Use gossip encryption – Understanding the Consul security/threat model
– Configure gossip encryption for the existing data center
– Manage the lifecycle of encryption keys