Free HashiCorp Vault-Associate Exam Questions

Become HashiCorp Certified with updated Vault-Associate exam questions and correct answers

Page: 1 / 66

Total 328 Questions | Updated On: Nov 20, 2024

Add To Cart

Question 1

By default, Vault tokens that are created without a specific TTL are issued a TTL equal to the default TTL on the cluster. What is the default TTL in Vault?

A : 336 hours (two weeks)

B : 60 minutes (one hour)

C : 768 hours (32 days)

D : 24 hours (one day)

Answer: C

Question 2

You've deployed Vault in your production environment and are curious to understand metrics on your Vault cluster, such as the number of writes to the backend, the status of WALs, and the seal status. What feature would you configure in order to view these metrics?

A : dit device

B : lemetry

C : thing to configure, these are available in the Vault log found on the OS

D : able logs for each individual secrets engines

Answer: B

Question 3

Given the following policy, which command below would not result in a permission denied error? (select two)

1 path "secret/*" {

2 capabilities = ["create", "update"]

3 allowed_parameters = {

4 "student" = ["steve", "frank", "jamie", "susan", "gerry", "damien"]

5 }

6 }

7 path "secret/apps/*" {

8 capabilities = ["read"]

9 }

10 path "secret/apps/results" {

11 capabilities = ["deny"]

12 }

A : ult kv put secret/apps/app01 student=bryan

B : ult kv put secret/common/results student=frank

C : ult kv put secret/apps/certificate key=AFIAKL8K6NEO3ID7NLW7EI4CN

D : vault kv put secret/apps/results student03=practice

E : ult kv list secret/apps/app01

F : ult kv get secret/apps/api_key

Answer: A,B

Question 4

True or False? Performing a rekey operation using the vault operator rekey command creates new unseal/recovery keys as well as a new master key?

A : ue

B :

Answer: A

Question 5

What is true about the output of the following command? (select three)

A : ch individual can decrypt on their own unseal key

B : admin will receive the unseal keys and be able to unseal Vault themselves

C : l three users, Jane/Joe/Student01 will receive the unseal keys and can unseal Vault.

D : keys will be returned encrypted

E : admin never sees all the unseal keys and cannot unseal Vault by themselves

Answer: A,D

Page: 1 / 66

Total 328 Questions | Updated On: Nov 20, 2024

Add To Cart