Consul Associate ACL System Quiz

1. What does the 'node' rule in an ACL policy control?

Access to specific node information and deregistration

Service discovery queries

KV store operations

Cluster leader election

2. Which ACL rule allows listing keys in the KV store?

Key_prefix with 'list' permission

Service with 'list' permission

Node with 'list' permission

Agent with 'list' permission

3. What is the relationship between ACL roles and policies in Consul?

Roles are collections of policies assigned to tokens

Policies are subsets of roles

They are the same thing with different names

Roles define token expiration, policies define permissions

4. How can you revoke an ACL token in Consul?

Using the /v1/acl/token/:id endpoint with DELETE

By restarting the Consul agent

Only through the Consul UI

Tokens cannot be revoked, only expire

5. What does the 'intentions' rule control in Consul ACLs?

Service-to-service communication permissions

Agent-to-agent replication

Datacenter federation rules

DNS resolution policies

6. In Consul, what is policy templating?

Pre-defined policy templates provided by Consul

Dynamic policy generation based on variables

Reusable policy snippets for common use cases

Encryption of policy data

7. Which Consul API endpoint is used to create ACL tokens?

/v1/acl/token

/v1/acl/create

/v1/token/new

/v1/auth/token

8. What is the purpose of an anonymous token in Consul ACLs?

To allow unauthenticated requests with default permissions

To manage cluster replication

To audit all API calls

To bypass all ACL checks

9. Can ACL tokens be set with an expiration time in Consul?

Yes, using ExpirationTime parameter

No, tokens never expire

Yes, but only for client tokens

Only through manual revocation

10. Which ACL rule type governs access to the Consul KV store?

Service rule

Key rule

Node rule

Agent rule

11. What is the primary purpose of ACLs in HashiCorp Consul?

To control access to services and data in the cluster

To manage cluster performance and load balancing

To monitor agent health and availability

To configure service discovery DNS settings

12. How are ACL policies applied to Consul agents?

Through agent tokens specified in agent configuration

Automatically to all agents equally

Only to client agents, not servers

Through DNS queries

13. What is a service identity token in Consul?

A token bound to a specific service name

A global token for all services

A token for datacenter replication

A token for agent communication

14. Which permission level allows reading but not writing to Consul KV data?

Write

Read

List

Manage

15. What is the default ACL policy when ACLs are enabled?

Always allow

Always deny

Allow with logging

Deny with audit trail

16. Which ACL mode must be enabled for ACL enforcement in Consul?

Acl_enabled = true

Acl_enforce_version_8 = true

Acl_default_policy = allow

Acl_master_token = set

17. What is an ACL role in Consul?

A named collection of policies and service identities

A specific service running in the cluster

A replication rule between datacenters

A token expiration policy

18. In Consul ACL policies, what does the 'service' rule control?

Agent configuration and health checks

Access to specific services and their instances

Cluster-wide replication settings

DNS query permissions

19. What does a Management token in Consul allow?

Read-only access to all resources

Full control over all cluster resources

Access only to specific services

Limited access to agent APIs

20. Which token type is used for general service and agent operations in Consul?

Management token

Client token

Agent token

Service token