HashiCorp Certified: Vault Associate Exam (VA-002-P) Free Practice Test

Question 1

Vault has failed to start. You inspect the log and find the error below. What needs to be changed in order to successfully start Vault?
"Error parsing config.hcl: At 1:12: illegal char"

A. fix the syntax error in the Vault configuration file

B. line 1 on the config file is blank

C. you must use single quotes vs double quotes in the config file

D. the " character cannot be used in the config file

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

When configuring Vault replication and monitoring its status, you keep seeing something called 'WALs'. What are WALs?

A. wake after lan

B. write along logging

C. write-ahead log

D. warning of allocated logs

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Select two answers to complete the following sentence:
Before a new provider can be used, it must be ______ and _______.

A. uploaded to source control

B. approved by HashiCorp

C. initialized

D. declared in the configuration

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?

A. terraform apply

B. terraform delete

C. terraform init

D. terraform plan

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You've hit the URL for the Vault UI, but you're presented with this screen. Why doesn't Vault present you with a way to log in?

A. a vault policy is preventing you from logging in

B. vault needs to be initialized before it can be used

C. the consul storage backend was not configured correctly

D. the vault configuration file has an incorrect configuration

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Vault configuration files can be written in what languages? (select two)

A. JSON

B. YAML

C. XML

D. HCL

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Using the Vault CLI, what command is used to authenticate to Vault?

A. vault creds

B. vault user

C. vault login

D. vault auth

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

You have been given requirements to create a security group for a new application. Since your organization standardizes on Terraform, you want to add this new security group with the fewest number of lines of code. What feature could you use to iterate over a list of required tcp ports to add to the new security group?

A. splat expression

B. terraform import

C. dynamic backend

D. dynamic block

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which of the following is not an activity associated with the Vault transit secrets engine?

A. rewrap

B. update

C. decrypt

D. encrypt

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

True or False?
terraform init cannot automatically download Community providers.

A. False

B. True

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)

A. persistent storage

B. encryption via TLS

C. ability to enable auth methods

D. access to all of the secret engines

E. faster deployment

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

True or False:
Similar to how Vault works with databases and cloud providers, the Active Directory secrets engine dynamically generates the account and password for the requesting Vault client.

A. False

B. True

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

True or False: You can migrate the Terraform backend but only if there are no resources currently being managed.

A. False

B. True

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

By default, the max TTL for a token is how many days?

A. 14 days

B. 31 days

C. 7 days

D. 32 days

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 15

Which two interfaces automatically assume the token for subsequent requests after successfully authenticating? (select two)

A. Consul

B. CLI

C. UI

D. API

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

HashiCorp Certified: Vault Associate (VA-002-P) Free Practice Test