HCVA0-003 HashiCorp Exam Questions and Free Practice Test

Question 49

- (Topic 3)
True or False? Once the lease for a dynamic secret has expired, Vault revokes the credentials on the backend platform for which they were created (i.e., database, AWS, Kubernetes).

A. True

B. False

Correct Answer:A

Question 50

- (Topic 3)
Short-lived, dynamically generated secrets provide organizations with many benefits. Select the benefits from the options below. (Select four)

A. Each application instance can generate its own credentials, rather than using a shared credential across all application instances

B. Credentials only exist when needed

C. Applications only have access to privileged accounts when needed

D. Credentials accidentally checked into a code repo or discovered in a text file are likely to be invalid

E. Dynamic credentials do not change, so legacy applications can easily take advantage of them

Correct Answer:ABCD

Question 51

- (Topic 5)
You are performing a high number of authentications in a short amount of time. You're experiencing slow throughput for token generation. How would you solve this problem?

A. Increase the time-to-live on service tokens

B. Implement batch tokens

C. Establish a rate limit quota

D. Reduce the number of policies attached to the tokens

Correct Answer:B

Question 52

- (Topic 2)
Using the Vault CLI, there are several ways to create a new policy. Select the valid commands (Select three)

A. vault policy write my-policy - << EOF path "secret/data/*" {capabilities = ["create", "update"]} EOF

B. vault policy create my-policy /tmp/policy.hcl

C. vault policy write my-policy /tmp/policy.hcl

D. $ cat user.hcl | vault policy write my-policy -

Correct Answer:ACD

Question 53

- (Topic 5)
What does the following policy do?
HCVA0-003 dumps exhibit

A. Grants access for each user to a KV folder which shares their id

B. Grants access to a special system entity folder

C. Allows a user to read data about the secret endpoint identity

D. Nothing, this is not a valid policy

Correct Answer:C

Question 54

- (Topic 2)
When generating a dynamic secret, what value is returned that a user can use to renew or revoke the lease?

A. renewable

B. token_ttl

C. lease_max

D. lease_id

Correct Answer:D

START HCVA0-003 EXAM