VA-002 practice questions 11–20

1. Question 11 · 88 in bank

   The vault lease renew command increments the lease time from:

   • AThe current time
   • BThe end of the lease

   Show answer

   Answer: A

   References

   • HashiCorp documentation

   Next question

2. Question 12 · 88 in bank

   When using Integrated Storage, which of the following should you do to recover from possible data loss?

   • AFailover to a standby node
   • BUse snapshot
   • CUse audit logs
   • DUse server logs

   Show answer

   Answer: B

   References

   • HashiCorp documentation

   Next question

3. Question 13 · 88 in bank

   How many Shamir’s key shares are required to unseal a Vault instance?

   • AAll key shares
   • BA quorum of key shares
   • COne or more keys
   • DThe threshold number of key shares

   Show answer

   Answer: D

   References

   • HashiCorp documentation

   Next question

4. Question 14 · 88 in bank

   Which of these are a benefit of using the Vault Agent?

   • AVault Agent allows for centralized configuration of application secrets engines
   • BVault Agent will auto-discover which authentication mechanism to use
   • CVault Agent will enforce minimum levels of encryption an application can use
   • DVault Agent will manage the lifecycle of cached tokens and leases automatically

   Show answer

   Answer: D

   References

   • HashiCorp documentation

   Next question

5. Question 15 · 88 in bank

   Which of the following describes usage of an identity group?

   • ALimit the policies that would otherwise apply to an entity in the group
   • BWhen they want to revoke the credentials for a whole set of entities simultaneously
   • CAudit token usage
   • DConsistently apply the same set of policies to a collection of entities

   Show answer

   Answer: D

   Next question

6. Question 16 · 88 in bank

   Vault supports which type of configuration for source limited token?

   • ACloud-bound tokens
   • BDomain-bound tokens
   • CCIDR-bound tokens
   • DCertificate-bound tokens

   Show answer

   Answer: C

   References

   • HashiCorp documentation

   Next question

7. Question 17 · 88 in bank

   Where does the Vault Agent store its cache?

   • AIn a file encrypted using the Vault transit secret engine
   • BIn the Vault key/value store
   • CIn an unencrypted file
   • DIn memory

   Show answer

   Answer: D

   References

   • HashiCorp documentation

   Next question

8. Question 18 · 88 in bank

   Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

   • APKI
   • BKey/Value secrets engine version 2, with TTL defined
   • CCloud KMS
   • DTransit

   Show answer

   Answer: A

   References

   • HashiCorp documentation

   Next question

9. Question 19 · 88 in bank

   When unsealing Vault each Shamir unseal key should be entered:

   • ASequentially from one system that all of the administrators are in front of
   • BBy different administrators each connecting from different computers
   • CWhile encrypted with each administrators PGP key
   • DAt the command line in one single command

   Show answer

   Answer: B

   References

   • HashiCorp documentation

   Next question

10. Question 20 · 88 in bank

    As a best practice, the root token should be stored in which of the following ways?

    • AShould be revoked and never stored after initial setup
    • BShould be stored in configuration automation tooling
    • CShould be stored in another password safe
    • DShould be stored in Vault

    Show answer

    Answer: A

    References

    • HashiCorp documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

VA-002 practice, question 11. 88 questions available.