Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

HashiCorp Certified: Vault Associate

Last Update 5 hours ago Total Questions : 200

The HashiCorp Certified: Vault Associate content is now fully updated, with all current exam questions added 5 hours ago. Deciding to include VA-002-P practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our VA-002-P exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these VA-002-P sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any HashiCorp Certified: Vault Associate practice test comfortably within the allotted time.

Question # 51

Which is not a capability that can be used when writing a Vault policy?

A.

read

B.

list

C.

delete

D.

create

E.

modify

F.

update

Question # 52

After encrypting data using the transit secrets engine, you ' ve received the following output. Which of the following is true based upon the output?

1. Key Value

2. --- -----

3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

A.

the original encryption key has been rotated at least once

B.

this is the second version of the encrypted data

C.

similar to the KV secrets engine, the transit secrets engine was enabled using the transit v2 option

D.

the data is stored in Vault using a KV v2 secrets engine

Question # 53

Select the answer below that completes the following statement:

Terraform Cloud can be managed from the CLI but requires __________?

A.

a TOTP token

B.

a username and password

C.

authentication using MFA

D.

an API token

Question # 54

In the example below, the depends_on argument creates what type of dependency?

1. esource " aws_instance " " example " {

2. ami = " ami-2757f631 "

3. instance_type = " t2.micro "

4. depends_on = [aws_s3_bucket.company_data]

5. }

A.

non-dependency resource

B.

implicit dependency

C.

explicit dependency

D.

internal dependency

Question # 55

Why is it a good idea to declare the required version of a provider in a Terraform configuration file?

1. terraform {

2. required_providers {

3. aws = " ~ > 1.0 "

4. }

5. }

A.

to remove older versions of the provider

B.

to ensure that the provider version matches the version of Terraform you are using

C.

providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes

D.

to match the version number of your application being deployed via Terraform

Question # 56

When architecting a Vault replication configuration, why should you never terminate TLS on a front-end load balancer?

A.

If Vault detects that the traffic has been unencrypted and re-encrypted, due to the load balancer, it will automatically drop the traffic as it is no longer trusted.

B.

Vault generates self-signed mutual TLS for replication. If the LB is performing TLS termination, this will break the mutual TLS between nodes.

C.

Vault requires that only Consul service discovery can be used to direct traffic to an active Vault node.

D.

Vault replication won ' t work with the type of certificates that a traditional load balancer uses.

Question # 57

What does the command terraform fmt do?

A.

formats the state file in order to ensure the latest state of resources can be obtained

B.

updates the font of the configuration file to the official font supported by HashiCorp

C.

rewrite Terraform configuration files to a canonical format and style

D.

deletes the existing configuration file

Question # 58

Vault ' s User Interface (UI) needs to be enabled in the command line before it can be used.

A.

FALSE

B.

TRUE

Question # 59

Which is not a benefit of running HashiCorp Vault in your environment?

A.

Integrate with your code repository to pull secrets when deploying your applications

B.

Consolidate static, long-lived passwords used throughout your organization

C.

Act as root or intermediate certificate authority to automate the generation of PKI certificates

D.

The ability to generate dynamic secrets for applications and resource access

Question # 60

Using the Vault CLI, what command is used to authenticate to Vault?

A.

vault creds

B.

vault user

C.

vault login

D.

vault auth

Go to page: