Free HashiCorp Certified: Vault Associate (003) Exam Practice Questions

Question # 31

Which of these functions can a secrets engine in Vault perform?

Options:

Encrypt data.

Store secrets.

Assign identity.

All of the above can be performed by a secrets engine in Vault.

Discussion 0

Question # 32

Vault leases can be renewed based on what increment of time?

Options:

Seconds

Minutes

Hours

Days

Discussion 0

Question # 33

How would you describe the value of using the Vault transit secrets engine?

Options:

Vault has an API that can be programmatically consumed by applications

The transit secrets engine ensures encryption in-transit and at-rest is enforced enterprise wide

Encryption for application data is best handled by a storage system or database engine, while storing encryption keys in Vault

The transit secrets engine relieves the burden of proper encryption/decryption from application developers and pushes the burden onto the operators of Vault

Discussion 0

Question # 34

A user logs into Vault through a configured LDAP auth method and notices that re-authentication is needed after every 8 hours.

Why would the user be required to log in again every 8 hours?

Options:

The time-to-live associated with the existing token lease is up, and the lease has been revoked.

The wrong token was provided by the user too many times and has been revoked.

The administrator revoked the root token.

The LDAP password associated with the user has changed.

Discussion 0

Question # 35

What environment variable overrides the CLI ' s default Vault server address?

Options:

VAULT_ADDR

VAULT_HTTP_ADORESS

VAULT_ADDRESS

VAULT _HTTPS_ ADDRESS

Discussion 0

Question # 36

Which of the following describes usage of an identity group?

Options:

Limit the policies that would otherwise apply to an entity in the group

When they want to revoke the credentials for a whole set of entities simultaneously

Audit token usage

Consistently apply the same set of policies to a collection of entities

Discussion 0

Question # 37

What information do you need to collect to use an entity alias in an ACL policy?

Options:

Auth method path

Group name

Auth method mount accessor

Metadata key

Discussion 0

Question # 38

How many Shamir ' s key shares are required to unseal a Vault instance?

Options:

All key shares

A quorum of key shares

One or more keys

The threshold number of key shares

Discussion 0

Question # 39

Where do you define the Namespace to log into using the Vault Ul?

To answer this question

Use your mouse to click on the screenshot in the location described above. An arrow indicator will mark where you have clicked. Click the " Answer " button once you have positioned the arrow to answer the question. You may need to scroll down to see the entire screenshot.

Question # 39