Free Vault-Associate Practice Exam Questions Online

Why HashiCorp Vault-Associate Practice Exam Questions?

Ready to level up your HashiCorp Vault-Associate exam study? Just TheExamsLab Vault-Associate practice tests free.

Vault-Associate exam questions are expertly crafted practice tests designed to simulate the real HashiCorp certification exam environment and help you assess your knowledge and figure out where you are lacking. From our free HashiCorp Certified: Vault Associate (002) Vault-Associate practice exam, you will feel secure in passing any question type or time limit. TheExamsLab offers the Vault-Associate exam questions 2024. Don’t settle or do it half-heartedly get the best and invest in the best what you want is what you get.

Page: 1 / 66

Total 328 Questions | Updated On: Nov 19, 2024

Add To Cart

Question 1

Smelly Candles, LLC is using Vault to encrypt customer data to ensure it is always stored in a secure fashion. Mostafa is developing a new application integration to send new customer data to be encrypted. He has created the following CURL request:

curl \

--header "X-Vault-Token: s.sf4vj1rFV5PvQSbrxQFsfbXA" \

--request POST \

--data @data.json \

https://prod-vault.smelly.com:8200/v1/transit/encrypt/customer-data

What would be contained within the data.json file?

A : cleartext customer data to be encrypted

B : transit secrets engine configuration file

C : ciphertext to be decrypted

D : the encryption key to be used for encrypting the data

Answer: A

Question 2

You have a CI/CD pipeline that executes Terraform to provision resources in AWS. Terraform currently uses privileged credentials that were manually created in AWS and are valid 24/7. Your security team has asked you to improve this process using Vault and limit the access to AWS only when it's needed.

Which of the following would allow you to improve this process and increase the security of this pipeline?

A : enable the Transit secrets engine to encrypt the AWS credentials and have Terraform retrieve these credentials when needed

B : enable the AWS secrets engine and instruct Terraform to dynamically generate a short-lived AWS credential on each terraform apply.

C : store the AWS credentials in the Vault KV store and use the Vault provider to obtain these credentials on each terraform apply.

D : enable the SSH secrets engine and have Terraform generate dynamic credentials when deploying resources in AWS

Answer: B

Question 3

Select the two default policies created in Vault. (select two)

A : default

B : vault

C : base

D : root

E : admin

F : user

Answer: A,D

Question 4

When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime

A : False

B : True

Answer: A

Question 5

What type of secrets engine is mounted at creds/?

A : database

B : KV v2

C : AWS

D : cubbyhole

Answer: A

Page: 1 / 66

Total 328 Questions | Updated On: Nov 19, 2024

Add To Cart