Exam style questions across every VA-002-P domain
Last Update 4 days ago
Total Questions : 200
Start with our free VA-002-P practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real HashiCorp Security Automation Certification exam. Each VA-002-P exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your HashiCorp weak domains, see where you're losing marks, and build a focused study plan in minutes.
After enabling the vault to autocomplete feature, you type vault and press the tab button, but nothing happens. Why doesn't vault display the available completions?
1. $ vault -autocomplete-install
2. $ vault
Which of the following connection types are supported by the remote-exec provisioner? (select two)
When administering Vault on a day-to-day basis, why is logging in with the root token, as shown below, a bad idea? (select two).

True or False:
The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If the drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.
True or False? By default, Terraform destroy will prompt for confirmation before proceeding.
What Terraform feature is shown in the example below?
1. resource "aws_security_group" "example" {
2. name = "sg-app-web-01"
3. dynamic "ingress" {
4. for_each = var.service_ports
5. content {
6. from_port = ingress.value
7. to_port = ingress.value
8. protocol = "tcp"
9. }
10. }
11. }
Terraform-specific settings and behaviors are declared in which configuration block type?
You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?
A user has logged into the Vault user interface but cannot browse to a secret located at kv/applications/app3, however, the policy the user is bound by permits read permission to the secret.
Because of the read permission, the user should be able to read the secret in the Vault UI.
