Hashicorp Certified Consul Associate 002 · Free Practice Question Medium
Question 17
What three files do you need to properly configure TLS for Consul server nodes? (select three)
-
A
the private key for the certificate
-
B
the public key for the certificate
-
C
the CA bundle
-
D
the certificate for the node
Reveal correct answers
Correct answers: A, C, D
Explanation
A Consul server node will require three files:
+ one for the CA bundle, which would include any intermediate CAs (if applicable) and the root CA
+ the certificate that was created from the intermediate or root CA
+ the private key associated with the certificate
Example configuration:
- {
- "verify_incoming": true,
- "verify_outgoing": true,
- "verify_server_hostname": true,
- "ca_file": "consul-agent-ca.pem",
- "cert_file": "dc1-server-consul-0.pem",
- "key_file": "dc1-server-consul-0-key.pem",
- "auto_encrypt": {
- "allow_tls": true
- }
- }
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
