HCVA0-003 HashiCorp Exam Questions and Free Practice Test

Question 19

- (Topic 4)
You have enabled the Transit secrets engine on your Vault cluster to provide an "encryption as a service" service as your team develops new applications. What is a prime use case for the Transit secrets engine?

A. Encrypting data before being written to an Amazon S3 bucket

B. Storing the encrypted data in Vault for easy retrieval

C. Generating dynamic SSH credentials for access to local systems

D. Creating X.509 certificates for a new fleet of containers

Correct Answer:A

Question 20

- (Topic 3)
Vault operators can create two types of groups in Vault. What are the two types?

A. External groups

B. Security groups

C. Policy groups

D. Internal groups

Correct Answer:AD

Question 21

- (Topic 3)
You have ciphertext stored in an Amazon S3 bucket encrypted by the key named prod- customer. Will Vault decrypt this data with the command vault write transit/decrypt/prod- customer ciphertext="vault:v4:Xa1f9FIJtn13em/Wb7QCsXsU/kCOn7..." given this output?
✑ $ vault read transit/keys/prod-customer
✑ Key Value
✑ --- -----
✑ ...
✑ keys map[4:1549347108 5:1549347109 6:1549347110]
✑ latest_version 6
✑ min_available_version 0
✑ min_decryption_version 4
✑ min_encryption_version 0
Will Vault decrypt this data for you by running the following command?
✑ $ vault write transit/decrypt/prod-customer ciphertext="vault:v4:Xa1f9FIJtn13em/Wb7QCsXsU/kCOn7..."

A. Yes, because the minimum decryption key configuration is set to 4

B. No, since the latest version of the key is 6

Correct Answer:A

Question 22

- (Topic 4)
You have enabled the Transit secrets engine and want to start encrypting data to store in Azure Blob storage. What is the next step that needs to be completed before you can encrypt data? (Select two)

A. Export the encryption key and upload it to the application server

B. Enable the Transit secrets engine API

C. Create an encryption key for the application to use

D. Write a policy that permits the application to use the encryption key

Correct Answer:CD

Question 23

- (Topic 1)
You??ve hit the URL for the Vault UI, but you??re presented with this screen. Why doesn??t Vault present you with a way to log in?
HCVA0-003 dumps exhibit

A. The Consul storage backend was not configured correctly

B. Vault needs to be initialized before it can be used

C. A Vault policy is preventing you from logging in

D. The Vault configuration file has an incorrect configuration

Correct Answer:B

Question 24

- (Topic 2)
Which isnota capability that can be used when writing a Vault policy?

A. delete

B. modify

C. create

D. list

E. read

F. update

Correct Answer:B

START HCVA0-003 EXAM