HCVA0-003 Exam Training Practice Tests (HashiCorp Certified: Vault Associate (003)Exam)]

Question 1

Vault supports which type of configuration for source limited token?

A. Cloud-bound tokens B. Domain-bound tokens C. CIDR-bound tokens D. Certificate-bound tokens

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which of the following statements are true about HCP Vault Dedicated? (Select three)

A. Increases security across clouds and machines through a single interface B. Provides 100% feature parity compared to Vault self-managed clusters C. Helps reduce operational overhead for organizations with push-button deployment and fully managed upgrades D. Increases reliability and ease of use so you can onboard applications and teams easily

Correct Answer: A,C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

An application has authenticated to Vault and has obtained dynamic database credentials with a lease of 4 hours. Four hours later, the credentials expire, and the application can no longer communicate with the backend database, so the application goes down. What should the developers instruct the application to do to prevent this from happening again while maintaining the same level of security?

A. Go back to using static credentials B. Use a different auth method C. Revoke the lease before expiration D. Renew the lease before expiration

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

True or False? You can create and update Vault policies using the UI.

A. True B. False

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

You are working on a new project and need to retrieve a secret from Vault. You log into the Vault UI and browse to the path where the secret is stored. Based on the screenshot below, what is true about the secrets stored in this path? (Select four)

A. The user does not have permission to delete the secret B. The secrets are stored in a KV v2 secrets engine C. There are four previous versions of the secret D. The user has additional permissions on the path beyond just list and read E. The secrets engine is mounted at the path developers/ F. The secrets are stored in a KV v1 secrets engine

Correct Answer: B,C,D,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Frapps, Inc. is a coffee startup specializing in frozen caffeinated beverages. Their new customer loyalty web app uses Vault to store sensitive information, choosing Integrated Storage for its benefits. Select the benefits the organization would see by using Integrated Storage over other storage backends (Select four)

A. Immediate access to storage since the data is stored locally on disk B. Reduces operational overhead since all configuration is within Vault itself C. Eliminates the requirement to deploy and manage a separate platform for storing encrypted data D. Uses the SERF gossip protocol to enable communication between cluster nodes E. Simplified troubleshooting since Integrated Storage is a built-in solution F. Eliminates network communication between hosts, requiring no open ports between hosts

Correct Answer: A,B,C,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

As a best practice, the root token should be stored in which of the following ways?

A. Should be stored in configuration automation tooling B. Should be revoked and never stored after initial setup C. Should be stored in Vault D. Should be stored in another password safe

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Which of the following are true about Vault policies?
Pick the 2 correct responses below.

A. Vault policies are path-based. B. A Vault policy must be created for every secret that will be accessed. C. Vault policies support globbing wildcards using the * symbol only at the end of the path. D. Vault policies support wildcards anywhere in the path. E. Vault policies support regular expressions. F. Vault supports an extensible permission structure that allows new permission types to be added as plugins.

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

The Vault encryption key is stored in Vault ' s backend storage.

A. True B. False

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

HashiCorp Certified: Vault Associate (003)Exam - HCVA0-003 Exam Practice Test