HashiCorp Certified: Vault Associate (002) - Vault-Associate-002 Exam Practice Test
Which Vault secret engine may be used to build your own internal certificate authority?
Correct Answer: D
An organization would like to use a scheduler to track & revoke access granted to a job (by Vault) at completion.
What auth-associated Vault object should be tracked to enable this behavior?
What auth-associated Vault object should be tracked to enable this behavior?
Correct Answer: A
An authentication method should be selected for a use case based on:
Correct Answer: D
Which of the following vaultleaseoperations uses a lease_idas an argument? (Choose two.)
Correct Answer: B,C
What environment variable overrides the CLI's default Vault server address?
Correct Answer: D
What information is required to revoke a Vault lease?
Correct Answer: B
You are managing a Vault implementation that has been integrated with Azure SQL database to provide dynamic credentials. You have created a role that will provide database credentials for database administrators (DBAs) to use for managing their database in Azure SQL. A DBA has requested a new credential by issuing the following Vault CLI command: vault read azuresql/creds/dba_access. The following output is returned:

The DBA has completed their work and would like to proactively remove the credential now that their work is complete.
Which of the following commands should the DBA execute?
vault delete azuresql/creds/dba_access

The DBA has completed their work and would like to proactively remove the credential now that their work is complete.
Which of the following commands should the DBA execute?
vault delete azuresql/creds/dba_access
Correct Answer: A
Vault supports which type of configuration for source limited token?
Correct Answer: C