HashiCorp Certified: Vault Associate (003)Exam - HCVA0-003 Exam Questions
QUESTION NO: 1
Which is true about Vault authentication responses when using the Vault API?
Which is true about Vault authentication responses when using the Vault API?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 2
Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?
Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?
Correct Answer: E
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 3
You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?
You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 4
When using the principle of least privilege with Vault ACL policies, you start by granting broad access, then remove capabilities as issues occur.
When using the principle of least privilege with Vault ACL policies, you start by granting broad access, then remove capabilities as issues occur.
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 5
Which of the following storage backends support high availability? (Select four)
Which of the following storage backends support high availability? (Select four)
Correct Answer: A,B,D,E
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 6
Elijah manages a legacy application that requires strict control over when its service account credentials change. Which type of credential should be used for this legacy application?
Elijah manages a legacy application that requires strict control over when its service account credentials change. Which type of credential should be used for this legacy application?
Correct Answer: A
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 7
What is a dynamic secret in HashiCorp Vault?
What is a dynamic secret in HashiCorp Vault?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 8
Which of the following is not an action associated with the Transit secrets engine when interacting with data?
Which of the following is not an action associated with the Transit secrets engine when interacting with data?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 9
You have multiple Kubernetes pods that need frequent access to Vault to retrieve credentials for establishing connectivity to a backend database. You enable the Kubernetes auth method in Vault. What resource do you need to create within Kubernetes to complete this configuration?
You have multiple Kubernetes pods that need frequent access to Vault to retrieve credentials for establishing connectivity to a backend database. You enable the Kubernetes auth method in Vault. What resource do you need to create within Kubernetes to complete this configuration?
Correct Answer: C
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
QUESTION NO: 10
You have a CI/CD pipeline using Terraform to provision AWS resources with static privileged credentials.
Your security team requests that you use Vault to limit AWS access when needed. How can you enhance this process and increase pipeline security?
You have a CI/CD pipeline using Terraform to provision AWS resources with static privileged credentials.
Your security team requests that you use Vault to limit AWS access when needed. How can you enhance this process and increase pipeline security?
Correct Answer: B
Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).
