Free HashiCorp HCCAO-003 Exam Questions

Become HashiCorp Certified with updated HCCAO-003 exam questions and correct answers

Page: 1 / 35

Total 174 Questions | Updated On: May 21, 2026

Add To Cart

Question 1

You've logged into the Consul UI and want to modify the policy that is used by a token assigned to an application. However, you see this screen when clicking the ACL

tab. What must you provide in order to access the ACL configuration page?

Consul-Associate-Part-2-Q57-page32-image1

A : policy ID that you want to modify

B : confirm your password used to log into Consul

C : accessor ID of the master token

D : ovide the master token or another token with sufficient privileges

Answer: D

Question 2

You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following

command:

$ consul intention create customer-db payment

However, the two services can still initiate new connections even after the intention is created. What would explain this?

A : default behavior of the command issued is allow

B : the mTLS certificates are both signed by the same CA, therefore the connectivity is permitted regardless of an intention

C : services are communicating over HTTP rather than HTTPS

D : ere is an identical intention that is permitting the connectivity

Answer: A

Question 3

When storing data in the Consul K/V, what type of nodes will replicate the Consul K/V data to ensure high availability.

A : l servers, including servers in all Consul federated datacenters

B : ients within the local Consul datacenter

C : rvers within the local Consul datacenter

D : th clients and servers within the local Consul datacenter

Answer: C

Question 4

From the options below, select the features that are available in Consul Enterprise, and not available in the open-source offering.

A : Connect (service to service authorization and encryption)

B : topilot (automated upgrades)

C : nsul snapshot agent (automated backups)

D : DC auth method (centralized authentication)

E : ntinel (Policy as Code)

F : Namespaces (datacenter isolation)

Answer: A,B,C,D

Question 5

Scenario: You have multiple services registered with Consul for your e-commerce site, including the front-end service, the shipping service, the inventory service, and the

cart service. To safeguard your customer's shipping addresses, you want to ensure that communication between the front-end and the shipping service is denied and that

traffic is only permitted from the cart service.

What feature of Consul Connect can you use to permit access to the shipping service from the cart service and deny communication from the front-end service?

Consul-Associate-Part-2-Q57-page32-image4

A : tentions

B : nsul agent

C : nsul ACLs

D : nsul Namespaces

Answer: A

Page: 1 / 35

Total 174 Questions | Updated On: May 21, 2026

Add To Cart