Vault-Associate-002 by HashiCorp Valid Free Exam Practice Test

Question 1

To create a non-root token with time-to-live (TTL) set to 30 minutes but with no max TTL which flag would you use?

A. -explicit-max-ttl=0 B. -orphan C. None of the above D. -ttl=30n

Correct Answer: D

Question 2

You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named "sally" with password "h0wN0wB4r0wnC0w"? This new user will need the power-users policy.

A.

B.

C.

D.

Correct Answer: C

Question 3

Running the second command in the GUI CU will succeed.

A. False B. True

Correct Answer: A

Question 4

Which of the following statements describe the secrets engine in Vault? (Choose three.)

A. Once enabled, you cannot disable the secrets engine B. Each secrets engine is isolated to its path C. You can build your own custom secrets engine D. A secrets engine cannot be enabled at multiple paths E. Some secrets engines simply store and read data

Correct Answer: B,C,E

Question 5

Which of the following statements are true about Vault policies? (Choose two.)

A. The default policy can not be modified B. Policies deny by default (empty policy grants no permission) C. Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault D. Vault must be restarted in order for a policy change to take an effect E. You must use YAML to define policies

Correct Answer: B,C

Question 6

What command creates a secret with the key "my-password" and the value "53cr3t" at path "my- secrets" within the KV secrets engine mounted at "secret"?

A. vault kv write 53cr3t my-secrets/my-password B. vault kv put secret/my-secrets my-password-53cr3t C. vault kv write secret/my-secrets/my-password 53cr3t D. vault kv put secret/my-secrets/my-password 53cr3t

Correct Answer: D

Question 7

When unsealing Vault each Shamir unseal key should be entered:

A. At the command line in one single command B. Sequentially from one system that all of the administrators are in front of C. While encrypted with each administrators PGP key D. By different administrators each connecting from different computers

Correct Answer: D

HashiCorp Certified: Vault Associate (002) - Vault-Associate-002 Exam Practice Test