VA-002-P Online Practice Questions and Answers

An application is trying to use a secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?

A. request a new secret and associated lease

B. try the expired secret in hopes it hasn't been deleted yet

C. request the TTL be extended for the secret

D. perform a lease renewal

In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.

A. True

B. False

Which two interfaces automatically assume the token for subsequent requests after successfully authenticating? (select two)

A. UI

B. API

C. CLI

D. Consul

The Vault Agent provides which of the following benefits? (select three)

A. client-side caching of responses

B. automatically creates secrets in the desired storage backend

C. authentication to Vault

D. token renewal

An administrator wants to create a new KV mount for individual users to maintain their own secrets but needs a way to simplify the policy so they don't need to write a new one for each new user? With the requirements listed below, what would such a policy look like? Requirement: Each user can perform all operations on their allocated key/value secret path

A. path "user-kv/data/{{identity.entity.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

B. path "user-kv/data/{{identity.entity.id.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

C. path "user-kv/data/{{identity.entity.aliases.<>.id}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

D. path "user-kv/data/{{user}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

What does the following API request return?

1.

$ curl \

2.

--header "X-Vault-Token: ..." \

3.

--request POST \

4.

--data @payload.json \

5.

http://127.0.0.1:8200/v1/sys/tools/random/164

A. a random string of 164 characters

B. a random token valid for 164 uses

C. None

D. a secured secret based on 164 bytes of data

When configuring Vault replication and monitoring its status, you keep seeing something called 'WALs'. What are WALs?

A. wake after lan

B. warning of allocated logs

C. write-ahead log

D. write along logging

From the options below, select the benefits of using the PKI (certificates) secrets engine: (select three)

A. TTLs on Vault certs are longer to ensure certificates are valid for a longer period of time

B. Vault can act as an intermediate CA

C. reducing, or eliminating certificate revocations

D. reduces time to get a certificate by eliminating the need to generate a private key and CSR

Given the following screenshot, how many secrets engines have been enabled?

A. 4

B. 3

C. 5

D. 2

Which of the following allows Terraform users to apply policy as code to enforce standardized configurations for resources being deployed via infrastructure as code?

A. functions

B. workspaces

C. module registry

D. sentinel