HCP Vault Secrets Centralized secrets lifecycle management for developers. Learn More

Automation Certification

Pass the Consul Associate certification exam to validate your networking automation skills.

HashiCorp Certified:

Consul Associate (002)

Product version tested:Consul 1.8 or higher

The Consul Associate Certification is for Site Reliability Engineers, Solutions Architects, DevOps professionals, or other Cloud Engineers who know the basic concepts and skills to build, secure, and maintain HashiCorp Consul Community. This includes understanding what enterprise features exist and what can and cannot be done using the community offering. You will be best prepared for this exam if you have professional experience using Consul in production, but performing the exam objectives in a personal demo environment may be sufficient.

  • Containerization knowledge
  • Basic terminal skills
  • Networking skills including load balancing and distributed systems
  • Understand the purpose of ACLs
  • Experience with TLS certificate lifecycle
Assessment TypeMultiple choice
FormatOnline proctored
Duration1 hour
Price$70.50 USD, plus locally applicable taxes and fees. Free retake not included.
Expiration2 years
1Explain Consul architecture
1aIdentify the components of Consul datacenter, including agents and communication protocols
1bPrepare Consul for high availability and performance
1cIdentify Consul's core functionality
1dDifferentiate agent roles
2Deploy a single datacenter
2aStart and manage the Consul process
2bInterpret a Consul agent configuration
2cConfigure Consul network addresses and ports
2dDescribe and configure agent join and leave behaviors
3Register services and use service discovery
3aInterpret a service registration
3bDifferentiate ways to register a single service
3cInterpret a service configuration with health check
3dCheck the service catalog status from the output of the DNS/API interface or via the Consul UI
3eInterpret a prepared query
3fUse a prepared query
4Access the Consul key/value (KV)
4aUnderstand the capabilities and limitations of the KV store
4bInteract with the KV store using both the Consul CLI and UI
4cMonitor KV changes using watch
4dMonitor KV changes using envconsul and consul-template
5Back up and restore
5aDescribe the content of a snapshot
5bBack up and restore the datacenter
5c[Enterprise] Describe the benefits of snapshot agent features
6Use Consul service mesh
6aUnderstand Consul Connect service mesh high level architecture
6bDescribe configuration for registering a service proxy
6cDescribe intentions for Consul Connect service mesh
6dCheck intentions in both the Consul CLI and UI
7Secure agent communication
7aUnderstanding Consul security/threat model
7bDifferentiate certificate types needed for TLS encryption
7cUnderstand the different TLS encryption settings for a fully secure datacenter
8Secure services with basic access control lists (ACL)
8aSet up and configure a basic ACL system
8bCreate policies
8cManage token lifecycle: multiple policies, token revoking, ACL roles, service identities
8dPerform a CLI request using a token
8ePerform an API request using a token
9Use gossip encryption
9aUnderstanding the Consul security/threat model
9bConfigure gossip encryption for the existing data center
9cManage the lifecycle of encryption keys

Visit the Exam-taker Handbook to learn about the requirements and policies for taking exams.

To renew your Consul Associate certification, you will need to take and pass the Consul Associate exam.

If you hold an unexpired Consul Associate certification: You can take the exam again starting 18 months after your previous exam date. When you pass the exam, the expiration date on your credentials will be extended.

If you hold an expired Consul Associate certification: You are eligible to recertify at any time. When you pass the exam again, you will receive a new, separate set of credentials with a new expiration date.