CA-003 Sample Questions & Answers
Describing Consul's architecture, registering services, using the service mesh, and securing agents and services with TLS and ACLs all tie for the top weighting, built on the pillars of service networking, bootstrapping a datacenter, gateways, and ongoing maintenance.
Launch the full CA-003 simulator →Showing 6 of 12 free samples.
- Question 1Beginner
Understand the Pillars of Service Networking · Summarize how Consul controls access to services at point of entry
In a Consul-based service mesh, which component is responsible for handling 'North-South' traffic entering the mesh from external clients?
Show answer & explanation
Correct answer: D
The Consul API Gateway (or historically, Ingress Gateway) is designed to manage North-South traffic, controlling access from external clients into the service mesh.
- Question 2Intermediate
Understand the Pillars of Service Networking · Understand how Consul discovers, tracks, and monitors the health of services
Regarding the service networking pillar of 'Health Monitoring', how does Consul differ from a traditional centralized load balancer health check?
Show answer & explanation
Correct answer: B
This is a key architectural difference. Instead of a central server pinging every node (O(N) traffic), Consul distributes the responsibility. The local agent checks its local services and only transmits status changes, making it highly scalable.
- Question 3Intermediate
Describe Consul Architecture · Review Consul server high availability & scalability options
You are deploying a Consul datacenter with 5 server agents. What is the quorum size required to elect a leader and commit logs, and what is the maximum number of server failures the cluster can tolerate without losing availability?
Show answer & explanation
Correct answer: B
Consul uses the Raft consensus protocol. For a cluster of N servers, quorum is (N/2)+1. For 5 servers, quorum is 3. The failure tolerance is (N-1)/2, which is 2. If 3 servers fail, only 2 remain, which is less than the quorum of 3, causing the cluster to stop processing writes.
- Question 4Advanced
Describe Consul Architecture · Differentiate between server agents and data plane components (client agents and Consul Dataplane)
In a modern Consul deployment on Kubernetes, how does the architecture differ from a traditional VM-based deployment regarding client agents?
Show answer & explanation
Correct answer: C
Consul 1.14+ on Kubernetes introduced the 'Consul Dataplane' architecture. Instead of running a client agent on every node (DaemonSet), a lightweight consul-dataplane process runs as a sidecar in the application pod and communicates directly with Consul servers, simplifying operations.
- Question 5Advanced
Describe Consul Architecture · Review Consul server high availability & scalability options
Which of the following Consul Enterprise features allows you to scale the number of server nodes beyond the typical limit of 5-7 to improve read scalability without impacting write performance or quorum stability?
Show answer & explanation
Correct answer: B
Read Replicas are non-voting server nodes. They replicate data from the voting servers and handle read requests (like DNS queries or API reads), allowing you to scale reads horizontally without increasing the Raft quorum size.
- Question 6IntermediateSelect 2
Describe Consul Architecture · Identify Consul datacenter components including agents and communication protocols options
Which two protocols are primarily used by Consul agents for communication? (Select TWO)
Show answer & explanation
Correct answers: A, C
Consul uses RPC for client-to-server communication (e.g., joining, querying, registering services).
Consul uses Serf (Gossip) for cluster membership, failure detection, and event broadcasting.
Ready for the real thing?
The full CA-003 simulator has every exam-style question, timed mode, and instant scoring.