Consul: discovery, mesh, and operations

Objectives and progression

Seven lessons, 35 questions, and five original cases with fictional banking and APS examples. Internal assessment of 26 decisions in 50 minutes. Mapping to ten historical domains with current technical documentation and explicit edition boundaries. Consul Associate (003) was retired on 2026-07-15, with no replacement exam version announced. Historical and technical curriculum, not preparation for an available exam. Technical references consulted 2026-09-30; confirm your environment version and edition.

Audience: Cloud, platform, networking, and APS professionals discovering, connecting, and operating services.

Prerequisites: TCP/IP, DNS, TLS, Linux, and distributed-application basics. Isolated practice recommended to consolidate commands.

325 estimated study minutes

• Relate service networking to the components performing each function.
• Prepare cluster formation and the move from lab to production.
• Interpret state from registration through to the endpoint consumer.
• Apply authorization on the actual service-request path.
• Separate channel encryption, credentials, and resource permissions.
• Choose connectivity by direction, boundaries, and licensed capabilities.
• Use control, traffic, and recovery evidence in daily operations.

Modules

1. Discovery, architecture, and quorum
2. Deployment and bootstrap
3. Registration, health checks, and DNS
4. Mesh, identity, and intentions
5. Agent security and ACLs
6. Gateways, peering, and editions
7. Observability, backup, and handover

Continue learning

HashiCorp

• Vault Associate
• Terraform Associate
• CKA — Certified Kubernetes Administrator
• Production Support L3

References and version

Historical Consul Associate (003), retired 2026-07-15; technical references inspected 2026-09-30

• Consul Associate 003 historical objectives and credential validity · 2026-09-30
• Consul Associate exam retirement notice · 2026-09-30
• Consul service networking overview · 2026-09-30
• Consul architecture · 2026-09-30
• Consul control plane · 2026-09-30
• Consul data plane · 2026-09-30
• Raft consensus and quorum · 2026-09-30
• Consul consistency modes · 2026-09-30
• Bootstrap a Consul datacenter · 2026-09-30
• Register services and checks · 2026-09-30
• Define health checks · 2026-09-30
• Service definition reference · 2026-09-30
• DNS and prepared queries · 2026-09-30
• DNS caching and stale reads · 2026-09-30
• DNS health filtering reference · 2026-09-30
• Service mesh encryption · 2026-09-30
• Service intentions and L7 permissions · 2026-09-30
• Mesh security boundaries · 2026-09-30
• Consul security layers · 2026-09-30
• Consul core security model · 2026-09-30
• Agent TLS and encryption practices · 2026-09-30
• Gossip encryption and key rotation · 2026-09-30
• ACL tokens and scoped policies · 2026-09-30
• ACL rule capabilities · 2026-09-30
• Consul gateway roles · 2026-09-30
• Cluster peering overview · 2026-09-30
• Current Consul editions and licensing · 2026-09-30
• Agent telemetry and operational signals · 2026-09-30
• Dataplane and Envoy metrics · 2026-09-30
• Snapshot save and state coverage · 2026-09-30
• Snapshot restore · 2026-09-30