Free HashiCorp HCCAO-003 Exam Questions

Become HashiCorp Certified with updated HCCAO-003 exam questions and correct answers

Page: 1 / 35

Total 174 Questions | Updated On: Oct 25, 2026

Add To Cart

Question 1

From the options below, select the features that are available in Consul Enterprise, and not available in the open-source offering.

A : Connect (service to service authorization and encryption)

B : topilot (automated upgrades)

C : nsul snapshot agent (automated backups)

D : DC auth method (centralized authentication)

E : ntinel (Policy as Code)

F : Namespaces (datacenter isolation)

Answer: A,B,C,D

Question 2

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

command:

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

A : default behavior of the command issued is allow

B : the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

C : services are communicating over HTTP rather than HTTPS

D : ere is an identical intention that is permitting the connectivity

Answer: A

Question 3

Scenario: You're deploying Consul in a dedicated environment, and due to the complex network layout, you are forced to funnel traffic through a firewall that will perform

a NAT (network address translation) for the Consul node. What configuration parameter can be used to identify what IP address that the other nodes in the cluster should

use to communicate with Consul?

A : -client

B : -bind

C : -serf-lan-bind

D : -advertise

Answer: D

Question 4

Scenario: You have multiple services registered with Consul for your e-commerce site, including the front-end service, the shipping service, the inventory service, and the

cart service. To safeguard your customer's shipping addresses, you want to ensure that communication between the front-end and the shipping service is denied and that

traffic is only permitted from the cart service.

What feature of Consul Connect can you use to permit access to the shipping service from the cart service and deny communication from the front-end service?

Consul-Associate-Part-2-Q57-page32-image4

A : tentions

B : nsul agent

C : nsul ACLs

D : nsul Namespaces

Answer: A

Question 5

Given the following ACL policy, what actions below would be permitted by a token assigned to this policy? (select three)

1. service "app1" {

2. policy = "write"

3. }

5. service_prefix "" {

6. policy = "read"

7. }

9. node_prefix "" {

10. policy = "read"

11. }

A : query any service registered to Consul to list the active clients for the service

B : n the consul members command to view server and client nodes in the cluster

C : create a new Consul service call app1

D : gister any service on Consul

Answer: A,B,C

Page: 1 / 35

Total 174 Questions | Updated On: Oct 25, 2026

Add To Cart