service cloud consultant questions Practice Exam 2025: Latest Questions

You want a service to be discoverable in Consul without changing the application code (no native Consul client). What is the recommended approach to register the service with Consul?

A Consul agent is configured with a service check, but the service never becomes healthy in the UI. The check is of type "script" and points to a file path on disk. What is the most likely cause?

Which statement best describes the role of Consul servers in a typical Consul datacenter?

You have enabled Consul service mesh for two services. You want to restrict which services can talk to each other using a deny-by-default approach. What Consul feature is primarily used to enforce this?

A security team requires that operators authenticate to Consul using an external identity provider, and that access is controlled via policies in Consul. Which capability best fits this requirement?

You are operating Consul in multiple datacenters. A service in dc1 needs to discover instances of a service that lives only in dc2. Which query approach is designed for this use case?

After enabling Consul ACLs, services can no longer register themselves and you see 'permission denied' errors from agents attempting to register service definitions. What is the most likely missing configuration?

You want to gradually shift traffic from v1 to v2 of a service using Consul service mesh, without changing client code. Which configuration approach supports this goal?

During an incident, several Consul servers are restarted and one server repeatedly fails to rejoin the cluster. Logs indicate it was removed from the Raft peer set. What operational feature helps automatically remove dead servers and manage the Raft peer set safely?

You are designing Consul service mesh across two datacenters where services in dc1 must call services in dc2 over mTLS. Direct pod-to-pod routing between datacenters is not possible; only specific gateway nodes can communicate across DCs. Which service mesh component is intended to enable this cross-datacenter communication pattern?

You have a Consul datacenter with 5 server agents. A network partition splits the servers into groups of 3 and 2. What behavior should you expect for writes to the KV store during the partition?

A developer wants an application to discover healthy instances of the "payments" service without using any Consul client library. Which approach best fits this requirement?

A team wants to add an additional health check that verifies an HTTP endpoint for an existing service registration on a node, without restarting the application. Which method is most appropriate?

You are deploying Consul service mesh. An application requires outbound access to the public internet (for example, to call a SaaS API). What is the recommended way to allow this while maintaining service mesh security controls?

After enabling ACLs, operators notice that some client agents can no longer register services, and the catalog shows frequent "permission denied" errors. What is the most likely missing configuration on those client agents?

A security team wants to enforce least privilege for an app that only needs to read service health information for the "api" service. Which ACL policy is most appropriate?

Your organization runs multiple Consul datacenters and wants to minimize cross-datacenter traffic while still allowing services to call each other over the service mesh. Which component is designed for this purpose?

A Consul cluster experiences intermittent "no leader" errors during periods of high disk I/O on one server node. Service discovery reads mostly work, but writes (service registrations/KV updates) fail intermittently. What is the best next step to troubleshoot?

You are migrating from a single Consul datacenter to two datacenters with WAN federation. Security requires encrypting server-to-server and client-to-client gossip traffic. What configuration is required to meet this requirement?

A platform team wants to allow teams to define L7 routing rules between services (for example, route based on HTTP path) and enforce them consistently across the service mesh. Which Consul feature is primarily used to define this routing behavior?

You are troubleshooting a Consul service mesh deployment. A service "api" has a sidecar proxy and can reach other services, but other services cannot reach "api" through the mesh. The "api" service is registered and healthy. What is the MOST likely missing configuration?

Your organization uses Consul with ACLs enabled. A CI job needs to register ephemeral services and write their health checks, but it must not be able to read or modify KV data. Which ACL policy capability set is the BEST fit for this token?

A team wants to expose a single DNS name for the "payments" service that always returns a healthy instance, and they also want failover behavior to a secondary datacenter when the local datacenter has no healthy instances. Which Consul feature BEST matches this requirement?

You run Consul servers in three availability zones. During an AZ outage, the cluster loses quorum and becomes read-only even though two zones still have servers running. What design change MOST directly improves quorum resiliency to a single-AZ failure?

A Consul client agent is running on a VM and services are registered locally. The VM can reach the Consul servers on the network, but the client never appears in the catalog and service registrations are missing. The agent logs show repeated TLS handshake failures. What is the MOST likely cause?