Hashicorp Certified Vault Associate 002 Exam Questions & Answers

All 23 questions

1. Q1 What command can be used to revoke all leases associated with a database role named prod-mysql?
2. Q2 Suzy is a Vault user that needs to create and replace values at the path secrets/automation/apps/chef. Does the following policy permit her…
3. Q3 When generating a dynamic secret, what value is returned that a user can use to renew or revoke the lease?
4. Q4 From the options below, select the benefits of using the PKI (x.509 certificates) secrets engine: (select three)
5. Q5 How does the instant updates feature work when using the Vault Secrets Operator?
6. Q6 Vault is configured with the oidc auth method and you need to log in using the CLI. What command would you use…
7. Q7 You are deploying Vault in a local data center, but want to be sure you have a secondary Vault cluster in the…
8. Q8 Without logging into another interface, what feature can Chad use to execute a simple CLI command to enable a new secrets engine?
9. Q9 Your supervisor has requested that you log into Vault and update a policy for one of the development teams. You successfully authenticated…
10. Q10 An application requires a specific key/value pair to be updated in order to process a batch job. The value should be either…
11. Q11 What is the default maximum time-to-live (TTL) for a token, measured in days?
12. Q12 Which of the following best describes response wrapping?
13. Q13 When a lease is created, what actions can be performed by using only the lease ID? (choose two)
14. Q14 Tommy has written an AWS Lambda function that will perform certain tasks for the organization when data has been uploaded to an…
15. Q15 An Active Directory admin created a service account for an internal application. You want to store these credentials in Vault, allowing a…
16. Q16 You have enabled the Transit secrets engine and want to start encrypting data to store in Azure Blob storage. What is the…
17. Q17 Mike's Cereal Shack uses Vault to encrypt customer data to ensure it is always stored securely. They are developing a new application…
18. Q18 You are using the Vault API to test authentication before modifying your CI/CD pipeline to properly authenticate to Vault. You manually authenticate to…
19. Q19 A developer team requests integration of their legacy application with Vault to encrypt and decrypt data for a backend database. They cannot…
20. Q20 True or False? After rotating a transit encryption key, all data encrypted with the previous version must be rewrapped or re-encrypted with…
21. Q21 Julie is a developer who needs to ensure an application can properly renew its lease for AWS credentials it uses to access…
22. Q22 True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along…
23. Q23 Over a few years, you have a lot of data that has been encrypted by older versions of a Transit encryption key.…