VA-002 practice questions 81–88

1. Question 81 · 88 in bank

   One of the benefits of using the Vault transit secrets engine is its ability to easily rotate encryption keys. Which of these is true regarding key rotation?

   • AVault automatically rotates the encryption key based on a set period
   • BVault can rotate encryption keys, but cannot enforce restrictions about the minimum encryption key version
   • CVault does not maintain the versioned keyring
   • DEncryption keys can be rotated manually by a user, or by an automated process which invokes the key rotation API

   Show answer

   Answer: D

   Next question

2. Question 82 · 88 in bank

   What is not a function provided by Vault’s transit secret engine?

   • AGenerating random bytes
   • BEncrypting data
   • CStoring ciphertext data
   • DVerifying signed data
   • ENone of the above

   Show answer

   Answer: C

   Next question

3. Question 83 · 88 in bank

   Which of the following storage backends supports high availability?

   • AAzure Storage Container
   • BManta
   • CAmazon S3
   • DConsul

   Show answer

   Answer: D

   Next question

4. Question 84 · 88 in bank

   You can build a high availability Vault cluster with any storage backend.

   • ATrue
   • BFalse

   Show answer

   Answer: B

   References

   • HashiCorp documentation

   Next question

5. Question 85 · 88 in bank

   Which command will generate a new transit key?

   • Avault put transit/keys/my-key
   • Bvault create -f transit/keys/my-key
   • Cvault write -f transit/keys/my-key
   • Dvault create transit/keys/my-key

   Show answer

   Answer: C

   Next question

6. Question 86 · 88 in bank

   Which of the following is the correct option to authenticate to Vault using a token using the CLI?

   • AA token can be used to authenticate to Vault through the API, not the CLI or the UI
   • Bvault login
   • Cvault <token>
   • DA token cannot be used to authenticate to Vault

   Show answer

   Answer: B

   References

   • HashiCorp documentation

   Next question

7. Question 87 · 88 in bank

   A child token must be assigned the same or a subset the parent token’s policies.

   • ATrue
   • BFalse

   Show answer

   Answer: A

   References

   • hashicorp.com documentation

   Next question

8. Question 88 · 88 in bank

   Select 2

   When enabling auto-unseal, how do you specify the seal type? (Choose two.)

   • ASet the VAULT_SEAL_TYPE environment variable
   • BUse the /sys/seal endpoint on the Vault API
   • CCreate a seal block in the server configuration file
   • DConfigure in the storage block of the server configuration file
   • EUse the vault operator command

   Show answer

   Answer: CE

   References

   • HashiCorp documentation
   • HashiCorp documentation

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

VA-002 practice, question 81. 88 questions available.