Question 55

- (Topic 2)
Christy has created a token and needs to use that token to access Vault. What command can she use to authenticate and access secrets stored in Vault?
$ vault token create -policy=christy Key Value
--- -----
token hvs.hxDIPd8RPVtxu4AzSGS1lArP token_accessor AxwxpDs6LbdFQbWGmBDnwIK3 token_duration 24h
token_renewable true token_policies ["christy" "default"] identity_policies []
policies ["christy" "default"]

Correct Answer:A

Question 56

- (Topic 3)
You have multiple Kubernetes pods that need frequent access to Vault to retrieve credentials for establishing connectivity to a backend database. You enable the Kubernetes auth method in Vault. What resource do you need to create within Kubernetes to complete this configuration?

Correct Answer:B

Question 57

- (Topic 2)
Before the following command can be run to encrypt data, what (three) commands must be run to enable and configure the transit secrets engine in Vault? (Select three)
text CollapseWrapCopy
$ vault write transit/encrypt/vendor plaintext="aGFzaGljb3JwIGNlcnRpZmllZA=="

Correct Answer:ADE

Question 58

- (Topic 1)
Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?

Correct Answer:D

Question 59

- (Topic 3)
True or False? You can create and update Vault policies using the UI.

Correct Answer:A

Question 60

- (Topic 4)
To secure your applications, your organization uses certificates generated by a public CA. However, this strategy has proven expensive and you have to revoke certificates even though they have additional time left. What Vault plugin can be used to quickly generate

Correct Answer:B

START HCVA0-003 EXAM