Getting Started with HashiCorp Nomad - Demo - Secure Gossip Encryption

In this lab, the instructor demonstrates how to enable gossip encryption in Nomad infrastructure. The process involves checking the current encryption status, modifying the server configuration, implementing a pre-shared key, and verifying the encryption status after restarting the Nomad service. The tutorial emphasizes the importance of using the same key across all servers to ensure secure communication.

What was the previous step taken before enabling gossip encryption in the Nomad infrastructure?

• Setting up a load balancer

• Enabling firewall rules

• Configuring DNS settings

• Enabling TLS

Which command is used to check if gossip encryption is enabled on a Nomad server?

• Nomad Agent -status

• Nomad Encrypt -status

• Nomad Agent -info

• Nomad Server -check

Where do you add the 'encrypt' parameter to enable gossip encryption on a Nomad server?

• In the user permissions file

• In the network configuration file

• In the firewall settings

• In the server stanza of the config file

What is the purpose of using the same pre-shared key across all servers?

• To ensure encrypted communication

• To simplify server management

• To enable load balancing

• To ensure consistent logging

What command is used to restart the Nomad service after enabling gossip encryption?

• sudo systemctl enable nomad

• sudo systemctl start nomad

• sudo systemctl restart nomad

• sudo systemctl stop nomad