HCVA0-003 HashiCorp Exam Questions and Free Practice Test

Question 37

- (Topic 2)
Which statement most accurately describes how the response wrapping feature functions in Vault?

A. Vault takes the response it would have sent to an HTTP client and instead inserts it into the cubbyhole of a single-use token, returning that single-use token instead.

B. Vault encrypts the response with a dedicated key and sends it directly to the client, never storing it on the server or using single-use tokens for additional security.

C. Vault divides the response into separate parts and stores each part in different tokens, requiring all tokens to be combined before disclosing the secret to the requesting client.

D. Vault duplicates the response within a persistent token and allows multiple unwraps, ensuring that any user with the correct token can retrieve the secret repeatedly without time restrictions.

Correct Answer:A

Question 38

- (Topic 1)
From the unseal options listed below, select the options you can use if you're deploying Vault on-premises (select four).

A. Certificates

B. Transit

C. AWS KMS

D. HSM PKCS11

E. Key shards

Correct Answer:BCDE

Question 39

- (Topic 5)
Which of the following are replication methods available in Vault Enterprise? Choose two correct answers.

A. Cluster sharding

B. Namespaces

C. Performance Replication

D. Disaster Recovery Replication

Correct Answer:CD

Question 40

- (Topic 1)
By default, what TCP port does Vault replication use?

A. tcp/8200

B. tcp/8300

C. tcp/8201

D. tcp/8301

Correct Answer:C

Question 41

- (Topic 3)
True or False? A token can be renewed up until the max TTL, even if the TTL has been reached.

A. True

B. False

Correct Answer:B

Question 42

- (Topic 3)
What header must be included in an API request in order to provide authentication validation?

A. X-Token-Vault

B. X-Vault-Token

C. X-Token-Creds

D. X-Vault-Creds

Correct Answer:B

START HCVA0-003 EXAM