


The Consul Associate exam sits in an awkward spot: too practical for people who have only read the docs, too broad for people who have only run one cluster. You need to know what the agent does versus the server, how the catalog and health checks interact, what happens when an intention is set to deny, and why a gossip encryption key rotation has to be sequenced.
You get 360 questions across six timed papers of 60, tracking the published exam objectives: Consul architecture and deployment, service discovery and registration, health checking, the service mesh and Envoy sidecars, intentions and service-to-service permissions, the key-value store, ACL system design, gossip and TLS encryption, and multi-datacenter federation with WAN gossip and mesh gateways.
Every item explains the reasoning, not just the verdict. Consul questions cluster around a handful of easily-confused pairs — client agents against servers, intentions against network ACLs, prepared queries against plain DNS lookups — and the explanations put those side by side so the distinction sticks. Where a CLI flag or configuration stanza matters, the explanation shows it in context.
Answer order shuffles every attempt. Sit one paper before you study to find the gaps, then work through the rest and re-run anything below 75%.
Disclaimer: This is an independent preparation course. It is not affiliated with, endorsed by, or sponsored by HashiCorp, Inc. Consul and HashiCorp are trademarks of HashiCorp, Inc. All questions are original practice items written by the author.