Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
PracticeVideosBlogFlashcardsEspañol
All Practice Exams

100+ Free Consul Ops Pro Practice Questions

Pass your HashiCorp Certified: Consul Operations Professional exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

In the Consul service mesh, what protocol must a service declare to use L7 traffic management features like routing and splitting?

A
B
C
D
to track
Same family resources

Explore More HashiCorp Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

HashiCorp Certified: Consul Associate

Practice Questions

HashiCorp Certified: Terraform Associate

Practice Questions

HashiCorp Certified: Terraform Professional

Practice Questions

HashiCorp Certified: Vault Associate

Practice Questions

HashiCorp Certified: Terraform Authoring & Operations Professional

Practice Questions

HashiCorp Certified: Vault Operations Professional

Practice Questions
2026 Statistics

Key Facts: Consul Ops Pro Exam

~60

Exam Questions

HashiCorp

$295

Exam Fee

HashiCorp

60 min

Time Limit

HashiCorp

2 years

Cert Validity

HashiCorp

PSI

Exam Delivery

Online proctored

~70%

Passing Threshold

Estimated

Consul Operations Professional is approximately 60 questions in 60 minutes, online proctored via PSI, and costs $295. Key domains: service mesh and Connect (~25%), ACL system and security (~20%), Consul architecture (~20%), multi-datacenter federation (~15%), Kubernetes integration (~10%), and operations/maintenance (~10%). The Consul Associate certification is strongly recommended as a prerequisite. Certification valid for 2 years.

Sample Consul Ops Pro Practice Questions

Try these sample questions to test your Consul Ops Pro exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which command saves a snapshot of the current Consul state to a file named backup.snap?
A.consul snapshot save backup.snap
B.consul backup create backup.snap
C.consul state export --file backup.snap
D.consul agent --snapshot backup.snap
Explanation: `consul snapshot save backup.snap` captures a point-in-time snapshot of the Consul datacenter state (KV, ACLs, service registrations) using the Raft snapshot mechanism and writes it to backup.snap.
2What does the `consul members` command display by default?
A.The WAN gossip pool members across all datacenters
B.The LAN gossip pool members of the local datacenter agent
C.All registered services in the catalog
D.All ACL tokens currently active in the cluster
Explanation: `consul members` shows the current view of the LAN gossip pool for the datacenter the agent belongs to, including node names, addresses, status, and roles.
3Which command creates an ACL token with a specific policy named 'web-policy'?
A.consul acl token create --policy-name web-policy
B.consul acl policy create --token web-policy
C.consul acl token new -policy=web-policy
D.consul token create --attach-policy web-policy
Explanation: `consul acl token create --policy-name web-policy` creates a new ACL token and attaches the named policy to it. The `--policy-name` flag links existing policies by name.
4Which command creates a service intention allowing 'web' to call 'db' at Layer 4?
A.consul intention create -allow web db
B.consul acl intention allow web db
C.consul connect intention create web db --allow
D.consul intention add --source web --destination db --action allow
Explanation: `consul intention create -allow web db` creates a Layer-4 allow intention from source 'web' to destination 'db'. This is the canonical CLI form for L4 intentions.
5In Consul's Raft consensus protocol, how many server nodes are required to tolerate one server failure while still achieving quorum?
A.2
B.3
C.4
D.5
Explanation: Raft requires a majority (quorum) of servers to be available. With 3 servers, quorum is 2, so one failure can be tolerated. A 2-server cluster loses quorum on any single failure.
6What port does Consul use by default for the Serf LAN gossip protocol?
A.8300
B.8301
C.8302
D.8500
Explanation: Port 8301 (TCP and UDP) is the default for Serf LAN gossip, used for intra-datacenter node-to-node communication and health checking.
7Which Consul agent mode runs with all features enabled but does NOT persist any state, making it suitable only for development?
A.client mode
B.server mode
C.dev mode
D.bootstrap mode
Explanation: Dev mode (`consul agent -dev`) starts a fully-featured agent that acts as both client and server, with no persistence, for local development and testing only.
8Which Consul configuration parameter defines the key-value path prefix an ACL policy grants access to?
A.key_prefix
B.kv_path
C.path_prefix
D.key_segment
Explanation: In Consul ACL HCL policy rules, `key_prefix` defines the KV path prefix that the policy rule applies to, e.g., `key_prefix "app/" { policy = "read" }`.
9What is the primary role of a Consul ingress gateway?
A.To encrypt all service-to-service traffic using mTLS within the mesh
B.To allow external clients outside the service mesh to reach mesh services
C.To connect services across different Consul datacenters via WAN federation
D.To route traffic from mesh services to external services not registered in Consul
Explanation: An ingress gateway acts as the entry point into the service mesh, allowing traffic from external clients (outside the mesh) to reach internal services while still enforcing mesh policies.
10Which Consul command restores a previously saved snapshot?
A.consul snapshot restore backup.snap
B.consul restore --snapshot backup.snap
C.consul agent --restore backup.snap
D.consul state import backup.snap
Explanation: `consul snapshot restore backup.snap` reads a snapshot file and restores Consul state (KV, ACLs, service registrations) to the cluster from that point in time.

About the Consul Ops Pro Exam

The HashiCorp Certified: Consul Operations Professional exam validates expert-level ability to deploy, secure, and operate HashiCorp Consul in production environments. Topics include the gossip protocol (Serf), Raft consensus, service mesh with Envoy proxy, ACL system (tokens, policies, roles, auth methods), multi-datacenter federation with mesh gateways, Kubernetes integration via consul-k8s, snapshot operations, and cluster troubleshooting.

Questions

60 scored questions

Time Limit

60 minutes

Passing Score

~70% (pass/fail)

Exam Fee

$295 (HashiCorp / PSI)

Consul Ops Pro Exam Content Outline

~25%

Service Discovery and Service Mesh

Service registration, health checks, Connect (service mesh), intentions, Envoy proxy, transparent proxy

~20%

ACL System and Security

ACL tokens, policies, roles, auth methods, mTLS, certificate rotation, gossip encryption

~20%

Consul Architecture

Gossip protocol (Serf), Raft consensus, server/client agents, datacenter federation, WAN/LAN gossip pools

~15%

Multi-Datacenter and Federation

WAN federation, mesh gateways, network segments, prepared queries, datacenter failover

~10%

Kubernetes Integration

Consul Helm chart, consul-k8s, pod annotations, transparent proxy, service sync

~10%

Operations and Maintenance

Snapshot management, consul members, consul operator, raft recovery, telemetry

How to Pass the Consul Ops Pro Exam

What You Need to Know

  • Passing score: ~70% (pass/fail)
  • Exam length: 60 questions
  • Time limit: 60 minutes
  • Exam fee: $295

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

Consul Ops Pro Study Tips from Top Performers

1Understand the difference between LAN and WAN gossip pools — LAN is per-datacenter, WAN connects server agents across datacenters
2Know ACL token hierarchy: master token, agent token, default token, and how auth methods (Kubernetes, JWT, AWS IAM) work
3Practice consul snapshot save and consul snapshot restore for disaster recovery scenarios
4Understand Raft quorum requirements: know how many server failures a 3-node vs 5-node cluster can tolerate
5Know the difference between intentions and ACL policies — intentions control service-to-service traffic, ACLs control API access
6Study consul connect sidecar proxies, Envoy proxy configuration, and transparent proxy for Kubernetes
7Learn mesh gateway configuration for cross-datacenter service mesh traffic and WAN federation setup

Frequently Asked Questions

What is the Consul Operations Professional exam?

The HashiCorp Certified: Consul Operations Professional exam validates advanced skills in deploying and operating Consul in production. It covers the gossip protocol, Raft consensus, service mesh with Envoy, ACL system, multi-datacenter federation, and Kubernetes integration. The exam has approximately 60 questions in 60 minutes, costs $295, and is delivered online via PSI.

Do I need the Consul Associate cert first?

There is no hard prerequisite, but HashiCorp strongly recommends passing the Consul Associate exam and having at least 1 year of production Consul experience before attempting the Professional exam. The Professional exam assumes deep operational knowledge that goes well beyond the Associate level.

How long is the Consul Operations Professional certification valid?

The Consul Operations Professional certification is valid for 2 years from the date you pass. HashiCorp requires recertification to maintain the credential, which reflects the fast-moving nature of the service mesh and cloud infrastructure ecosystem.

What are the main Consul Professional exam topics?

Key domains include: service mesh and Connect with Envoy proxy (~25%), ACL system security (~20%), Consul architecture including gossip and Raft (~20%), multi-datacenter federation with mesh gateways (~15%), Kubernetes integration (~10%), and operations/maintenance including snapshots and raft recovery (~10%).

How does the gossip protocol work in Consul?

Consul uses the Serf library to implement a gossip protocol for both LAN (within a datacenter) and WAN (across datacenters) communication. The LAN gossip pool is used for agent membership and health checking. The WAN gossip pool coordinates between datacenter servers. Gossip messages are encrypted using a symmetric key configured with the encrypt parameter.

What is Raft consensus in Consul?

Consul uses the Raft consensus algorithm for leader election and log replication among server nodes. All writes go through the leader, which replicates them to a quorum of followers. A cluster needs (n/2)+1 servers to maintain quorum — a 3-node cluster can tolerate 1 failure, a 5-node cluster can tolerate 2 failures. The consul operator raft command helps with raft recovery in emergency scenarios.