VA-002-P by HashiCorp Actual Free Exam Questions And Answers

Question 1

What does the following API request return?
1. $ curl \
2. --header "X-Vault-Token: ..." \
3. --request POST \
4. --data @payload.json \
5. http://127.0.0.1:8200/v1/sys/tools/random/164

A. a random string of 164 characters

B. a secured secret based on 164 bytes of data

C. a random token valid for 164 uses

D. None

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Which type of Vault replication copies all data from Vault, including K/V data, policies, and client tokens?

A. failover replication

B. DR replication

C. online replication

D. performance replication

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime.

A. False

B. True

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

You are deploying Vault in a local data center, but want to be sure you have a secondary cluster in the event the primary cluster goes offline. In the secondary data center, you have applications that are running, as they are architected to run active/active. Which type of replication would be best in this scenario?

A. disaster recovery replication

B. end-to-end replication

C. single-node replication

D. performance replication

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?

A. modify the policy to allow the create permission

B. remove the deny policy blocking access to the secrets/apps/app1 path

C. add LIST to the policy so the user can browse the paths leading up to the key/value's path

D. add read permissions to the path secrets/apps

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Permissions for Vault backend functions are available at which path?

A. admin/

B. sys/

C. vault/

D. system/

E. backend/

F. security/

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which of the following is not an activity associated with the Vault transit secrets engine?

A. encrypt

B. update

C. rewrap

D. decrypt

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

By default, the max TTL for a token is how many days?

A. 14 days

B. 31 days

C. 32 days

D. 7 days

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

What happens when a terraform apply command is executed?

A. creates the execution plan for the deployment of resources

B. the backend is initialized and the working directory is prepped

C. applies the changes required in the target infrastructure in order to reach the desired configuration

D. reconciles the state Terraform knows about with the real-world infrastructure

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

Using the Vault CLI, what command is used to authenticate to Vault?

A. vault user

B. vault auth

C. vault creds

D. vault login

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 11

You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121"
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

A. the token used to issue the encryption request does not have the appropriate permissions

B. the plain text data needs to be encoded to base64

C. credit card numbers are not supported using the transit secrets engine since it is considered sensitive data

D. the credit card number should not include spaces

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

Which of the following policies would permit a user to generate dynamic credentials on a database?

A. path "database/creds/read_only_role" {
capabilities = ["sudo"]
}

B. path "database/creds/read_only_role" {
capabilities = ["read"]
}

C. path "database/creds/read_only_role" {
capabilities = ["generate"]
}

D. path "database/creds/read_only_role" {
capabilities = ["list"]
}

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 13

After a client has authenticated, what security feature is used to make subsequent calls?

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 14

Select all Operating Systems that Terraform is available for. (select five)

Discussion 0

Correct Answer: A,B,C,D,E Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

HashiCorp Certified: Vault Associate - VA-002-P Exam Practice Test

Contact Us

Useful Links

Latest Updated