最新的HashiCorp Certified: Vault Associate (003)Exam - HCVA0-003免費考試真題
問題1
Your organization has applications in a primary data center and a secondary warm-standby site. You want to configure Vault replication between the primary and secondary clusters. If the primary fails over to the secondary, the applications must interact with Vault without re-authenticating. What type of Vault replication would you use?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題2
Your application cannot manage authentication with Vault, but it can communicate with a local service to retrieve secrets. What solution can enable your app to generate dynamic credentials from Vault?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題3
True or False? All dynamic secrets in Vault are required to have a lease.
正確答案: B
說明：（僅 VCESoft 成員可見）
問題4
Based on the output below, how many policies have been added to Vault?
$ vault policy list
base
default
root
web-app-1
automation-team
$ vault policy list
base
default
root
web-app-1
automation-team
正確答案: C
說明：（僅 VCESoft 成員可見）
問題5
There are three Vault policies displayed in the exhibit.
What do these policies allow the organization to do?
Exhibit:
app.hcl
path " transit/encrypt/my_app_key " { capabilities = [ " update " ] }
callcenter.hcl
path " transit/decrypt/my_app_key " { capabilities = [ " update " ] }
rewrap.hcl
path " transit/keys/my_app_key " { capabilities = [ " read " ] }
path " transit/rewrap/my_app_key " { capabilities = [ " update " ] }
What do these policies allow the organization to do?
Exhibit:
app.hcl
path " transit/encrypt/my_app_key " { capabilities = [ " update " ] }
callcenter.hcl
path " transit/decrypt/my_app_key " { capabilities = [ " update " ] }
rewrap.hcl
path " transit/keys/my_app_key " { capabilities = [ " read " ] }
path " transit/rewrap/my_app_key " { capabilities = [ " update " ] }
正確答案: C
說明：（僅 VCESoft 成員可見）
問題6
Which of the following is true about the token authentication method in Vault? (Select three)
正確答案: A,B,C
說明：（僅 VCESoft 成員可見）
問題7
During a service outage, you must ensure all current tokens and leases are copied to another Vault cluster for failover so applications don't need to authenticate. How can you accomplish this?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題8
The Vault encryption key is stored in Vault ' s backend storage.
正確答案: A
說明：（僅 VCESoft 成員可見）
問題9
After issuing the command to delete a secret, you run a vault kv list command, but the path to the secret still seems to exist. What command would permanently delete the path from Vault?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題10
True or False? Although AppRole is designed for machines, humans can use it to authenticate to Vault if you wish.
正確答案: B
說明：（僅 VCESoft 成員可見）
問題11
When you are unsealing Vault using unseal keys, what are you actually doing?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題12
Your organization is integrating its legacy application with Vault to improve its security. However, you have discovered that the application has issues when the token changes for authentication during testing. What type of token could be used to help alleviate this issue without compromising security?
正確答案: D
說明：（僅 VCESoft 成員可見）
