HashiCorp HCVA0-003 Quiz 1 Topic 1 Questions 1-5

Question: 1

Your organization is integrating its legacy application with Vault to improve its security. However, you have discovered that the application has issues when the token changes for authentication during testing. What type of token could be used to help alleviate this issue without compromising security?

APeriodic Service Token

BRoot Token

COrphan Service Token

DBatch Token

Show Answer

Question: 2

The following three policies exist in Vault. What do these policies allow an organization to do?

q2_HCVA0-003

ASeparates permissions allowed on actions associated with the transit secret engine

BNothing, as the minimum permissions to perform useful tasks are not present

CEncrypt, decrypt, and rewrap data using the transit engine all in one policy

DCreate a transit encryption key for encrypting, decrypting, and rewrapping encrypted data

Show Answer

Question: 3

You are planning to deploy a new Vault cluster for your organization and notice that Vault supports a wide variety of storage backends. You need high availability since you will have multiple applications relying on the Vault service. When building your cluster, can you choose any of the available storage backends?

AYes, because all backends provide similar functionality

BNo, because not all storage backends provide similar functionality

Show Answer

Question: 4

In regards to the Transit secrets engine, which of the following is true given the following command and output (select three):

$ vault write encryption/encrypt/creditcard plaintext=$(base64 <<< "1234 5678 9101 1121")

Key: ciphertext Value: vault:v3:cZNHVx+sxdMErXRSuDa1q/pz49fXTn1PScKfhf+PIZPvy8xKfkytpwKcbC0fF2U=

AThe Transit secrets engine is mounted at the encryption path

BThe name of the keyring used to encrypt the data is creditcard

CThere are at least three data keys associated with this keyring

DThe data was written to the encryption path, which is provided by default when enabling the Transit secrets engine

Show Answer

Question: 5

Which of these are a benefit of using the Vault Agent?

AVault Agent allows for centralized configuration of application secrets engines

BVault Agent will auto-discover which authentication mechanism to use

CVault Agent will enforce minimum levels of encryption an application can use

DVault Agent will manage the lifecycle of cached tokens and leases automatically

Show Answer

HashiCorp HCVA0-003 Quiz:1 Topic:1 Questions:1-5