VA-002 practice questions 41–50

1. Question 41 · 88 in bank

   Select 3

   Which of the following statements describe the secrets engine in Vault? (Choose three.)

   • ASome secrets engines simply store and read data
   • BOnce enabled, you cannot disable the secrets engine
   • CYou can build your own custom secrets engine
   • DEach secrets engine is isolated to its path
   • EA secrets engine cannot be enabled at multiple paths

   Show answer

   Answer: ACD

   Next question

2. Question 42 · 88 in bank

   What is a benefit of response wrapping?

   • ALog every use of a secret
   • BLoad balance secret generation across a Vault cluster
   • CProvide error recovery to a secret so it is not corrupted in transit
   • DEnsure that only a single party can ever unwrap the token and see what’s inside

   Show answer

   Answer: D

   References

   • HashiCorp documentation

   Next question

3. Question 43 · 88 in bank

   How would you describe the value of using the Vault transit secrets engine?

   • AVault has an API that can be programmatically consumed by applications
   • BThe transit secrets engine ensures encryption in-transit and at-rest is enforced enterprise wide
   • CEncryption for application data is best handled by a storage system or database engine, while storing encryption keys in Vault
   • DThe transit secrets engine relieves the burden of proper encryption/decryption from application developers and pushes the burden onto the operators of Vault

   Show answer

   Answer: D

   References

   • HashiCorp documentation

   Next question

4. Question 44 · 88 in bank

   Which of the following describes the Vault’s auth method component?

   • AIt verifies a client against an internal or external system, and generates a token with the appropriate policies attached
   • BIt verifies a client against an internal or external system, and generates a token with root policy
   • CIt is responsible for durable storage of client tokens
   • DIt dynamically generates a unique set of secrets with appropriate permissions attached

   Show answer

   Answer: A

   Next question

5. Question 45 · 88 in bank

   Which Vault secret engine may be used to build your own internal certificate authority?

   • ATransit
   • BPKI
   • CPostgreSQL
   • DGeneric

   Show answer

   Answer: B

   References

   • HashiCorp documentation

   Next question

6. Question 46 · 88 in bank

   Select 2

   Which of the following statements are true about Vault policies? (Choose two.)

   • AThe default policy can not be modified
   • BYou must use YAML to define policies
   • CPolicies provide a declarative way to grant or forbid access to certain paths and operations in Vault
   • DVault must be restarted in order for a policy change to take an effect
   • EPolicies deny by default (empty policy grants no permission)

   Show answer

   Answer: CE

   References

   • HashiCorp documentation

   Next question

7. Question 47 · 88 in bank

   Use this screenshot to answer the question below:

   

   Where on this page would you click to view a secret located at secret/my-secret?

   • AA
   • BB
   • CC
   • DD
   • EE

   Show answer

   Answer: D

   Next question

8. Question 48 · 88 in bank

   An organization would like to use a scheduler to track & revoke access granted to a job (by Vault) at completion. What auth-associated Vault object should be tracked to enable this behavior?

   • AToken accessor
   • BToken ID
   • CLease ID
   • DAuthentication method

   Show answer

   Answer: A

   References

   • HashiCorp documentation

   Next question

9. Question 49 · 88 in bank

   Which statement describes the results of this command: $ vault secrets enable transit?

   • AEnables the transit secrets engine at transit path
   • BRequires a root token to execute the command successfully
   • CEnables the transit secrets engine at secret path
   • DFails due to missing -path parameter
   • EFails because the transit secrets engine is enabled by default

   Show answer

   Answer: A

   References

   • HashiCorp documentation

   Next question

10. Question 50 · 88 in bank

    Running the second command in the GUI CU will succeed.

    

    • ATrue
    • BFalse

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

VA-002 practice, question 41. 88 questions available.