Consul Ops Pro
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
Consul Ops Pro is an independent study track for engineers who run HashiCorp Consul in production rather than merely consuming it. It targets platform, SRE, and infrastructure engineers responsible for cluster design, server lifecycle, service mesh rollout, ACL and TLS posture, monitoring, and recovery. The eight domains mirror the operational surface of Consul: architecture and deployment topologies; bootstrapping, server management, and upgrades; service registration, health checks, and Connect; the KV store, intentions, and ACLs; TLS, gossip encryption, and secrets handling; observability and logging; troubleshooting, failure recovery, and backup/restore; and automation, Infrastructure as Code, and Enterprise features. Expect scenario-based items that describe a cluster symptom or a migration goal and ask for the correct cause, command, or configuration block, alongside standard multiple choice and multiple response. Multiple response items are typically scored all-or-nothing, so read each option against the actual behavior of the version in question. Prepare by building a small lab: three servers, several clients, TLS and gossip encryption from the start, then deliberately break things - lose a server, expire a token, rotate certificates - and practise recovery. Read the official Consul documentation and release notes closely, especially upgrade and compatibility notes. This page is independent study material and is not affiliated with or endorsed by HashiCorp; confirm current exam logistics on the official site.
What you'll study
About Consul Ops Pro preparation
What is the exam format?
The published format is multiple choice, multiple response, and scenario-based items delivered in English. The official body publishes the current question count, time limit, and delivery method, so check its site before booking. Practise reading long scenario stems quickly and identifying the single decisive detail, because scenario items reward careful reading more than memorization.
How difficult is the exam?
It is an operations exam, not an introductory one. Questions assume working knowledge of Raft, gossip, agent configuration, and ACL token flows. Candidates who have only followed a getting-started tutorial usually find the failure-analysis items hard. Hands-on lab experience with a multi-server cluster and deliberate breakage is the strongest preparation.
What happens if I fail - can I retake it?
Retake rules, waiting periods, and any fees are set by the official certification body and change over time. Check the official site for the current retake policy rather than relying on older accounts. In the meantime, review your weakest domains using the published weights, since ACLs, Connect, and recovery items carry substantial weight.
How long should I plan to study?
Most working engineers need several weeks of part-time study. Budget roughly a third of that time for hands-on lab work and the rest for documentation reading and practice questions. Prioritize the three heaviest domains - Connect and service registration, architecture, and server management - then fill gaps in observability and automation.
In what order should I study the domains?
Start with architecture and bootstrapping so later topics have context. Then cover service registration, health checks, and Connect, followed by KV, intentions, and ACLs. Layer security on top, since TLS and gossip encryption touch every other area. Finish with observability, troubleshooting and recovery, and automation, which are easiest to absorb once the cluster model is solid.
What are the most common failure modes?
Candidates lose points on ACL default-deny behavior, the difference between service and node identity in intentions, and upgrade ordering across servers and clients. Others confuse gossip encryption with TLS, or misread health check semantics. Another frequent error is choosing a command that looks plausible but does not exist; verify flags against the documentation version you are studying.
Do I need to memorize commands?
Not verbatim, but you should recognize the correct subcommand and the effect of key flags for common operations: joining a cluster, snapshotting, rotating gossip keys, and inspecting members. Scenario items often hinge on whether a flag changes state or only reports it, so understand intent rather than memorizing syntax.
Is the exam tied to a specific Consul version?
Exam content generally tracks a recent stable release, and version-specific behavior matters for upgrades, Connect, and Enterprise features. The official body states the version basis for the current exam. When studying, note features that changed between minor releases and check release notes so you do not apply outdated defaults.
Does this page or track make me certified?
No. This is independent study material for candidates preparing for the Consul operations credential; it is not official, not endorsed by HashiCorp, and completing it confers no certification. Only the official certification body can issue the credential, and only its site carries authoritative information on eligibility, scheduling, and results.