Summer Sale Special 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ex2p65

Exact2Pass Menu

HashiCorp Certified: Vault Associate

Last Update 19 hours ago Total Questions : 200

The HashiCorp Certified: Vault Associate content is now fully updated, with all current exam questions added 19 hours ago. Deciding to include VA-002-P practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our VA-002-P exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these VA-002-P sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any HashiCorp Certified: Vault Associate practice test comfortably within the allotted time.

Question # 4

Permissions for Vault backend functions are available at which path?

A.

security/

B.

admin/

C.

backend/

D.

system/

E.

vault/

F.

sys/

Question # 5

In regards to the transit secrets engine, which of the following is true given the following command and output: (select three)

1. $ vault write encryption/encrypt/creditcard plaintext=$(base64 <<< "1234 5678 9101 1121")

2. Key Value

3. --- -----

4. ciphertext vault:v3:cZNHVx+sxdMErXRSuDa1q/pz49fXTn1PScKfhf+PIZPvy8xKfkytpwKcbC0fF2U=

A.

there are at least three data keys associated with this keyring

B.

the name of the keyring used to encrypt the data is creditcard

C.

the data was written to the encryption path, which is provided by default when enabling the transit secrets engine

D.

the transit secrets engine is mounted at the encryption path

Question # 6

What are the benefits of using Infrastructure as Code? (select five)

A.

Infrastructure as Code easily replaces development languages such as Go and .Net for application development

B.

Infrastructure as Code allows a user to turn a manual task into a simple, automated deployment

C.

Infrastructure as Code is relatively simple to learn and write, regardless of a user's prior experience with developing code

D.

Infrastructure as Code is easily repeatable, allowing the user to reuse code to deploy similar, yet different resources

E.

Infrastructure as Code provides configuration consistency and standardization among deployments

F.

Infrastructure as Code gives the user the ability to recreate an application's infrastructure for disaster recovery scenarios

Question # 7

Which auth method is ideal for machine to machine authentication?

A.

GitHub

B.

UserPass

C.

AppRole

D.

Okta

Question # 8

Terraform-specific settings and behaviors are declared in which configuration block type?

A.

data

B.

resource

C.

terraform

D.

provider

Question # 9

If a client is currently assigned the following policy, what additional policy can be added to ensure they cannot access the data stored at secret/apps/confidential but still, read all other secrets?

A.

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

B.

path "secret/apps/*" {

capabilities = ["deny"]

}

C.

path "secret/apps/confidential" {

capabilities = ["deny"]

}

D.

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

path "secret/*" {

capabilities = ["read", "deny"]

}

Question # 10

Which of the following commands will remove all secrets at a specific path?

A.

vault lease revoke -prefix

B.

vault delete lease -all

C.

vault lease revoke -all

D.

vault revoke -all

Go to page: