HCVA0-003 HashiCorp Exam Questions and Free Practice Test

Question 7

- (Topic 5)
You have been tasked with writing a policy that will allow read permissions for all secrets at path secret/bar. The users that are assigned this policy should also be able to list the secrets.What should this policy look like?

A. HCVA0-003 dumps exhibit

B. HCVA0-003 dumps exhibit

C. HCVA0-003 dumps exhibit

D. HCVA0-003 dumps exhibit

Correct Answer:C

Question 8

- (Topic 4)
You are planning the deployment of your first Vault cluster and have decided to use Integrated Storage as the storage backend. Where do you configure the storage backend to be used by Vault?

A. In the systemd service file

B. Inside the Vault service once Vault is up and running

C. In the Vault configuration file

D. In the Vault Agent sink file

Correct Answer:C

Question 9

- (Topic 1)
You??ve set up multiple Vault clusters, one on-premises intended to be the primary cluster, and the second cluster in AWS, which was deployed for performance replication. After enabling replication, developers complain that all the data they??ve stored in the AWS Vault cluster is missing. What happened?

A. There is a certificate mismatch after replication was enabled since Vault replication generates its own TLS certificates to ensure nodes are trusted entities

B. All of the data on the secondary cluster was deleted after replication was enabled

C. The data was automatically copied to the primary cluster after replication was enabled since all writes are always forwarded to the primary cluster

D. The data was moved to a recovery path after replication was enable

E. Use the vault secrets move command to move the data back to its intended location

Correct Answer:B

Question 10

- (Topic 4)
What of the following features are true about batch tokens in Vault? (Select two)

A. Batch tokens are not persisted (written) to storage

B. Batch tokens can be renewed

C. Batch tokens are valid across all clusters when using Vault Enterprise replication

D. Batch tokens can create child tokens

Correct Answer:AC

Question 11

- (Topic 4)
Your co-worker has asked you to perform certain operations in Vault and has provided you with a token accessor (not the token itself). What Vault operations would you be allowed to perform using only the provided accessor? (Select three)

A. Renew the token to extend the TTL

B. Revoke the token in Vault to make it invalid

C. Create child tokens associated with the same policies as the related token

D. Lookup properties of the token, such as the TTL, policies, and metadata

Correct Answer:ABD

Question 12

- (Topic 2)
Compared to service tokens, batch tokens are ideal for what type of action?

A. Generating dynamic credentials

B. Renewing other tokens

C. For daily batch jobs requesting secrets from Vault

D. Short-lived, high-volume, or ??ephemeral?? tasks

Correct Answer:D

START HCVA0-003 EXAM