Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
HashiCorp
HashiCorp Security Automation Certification
VA-002-P
HashiCorp Certified: Vault Associate Questions and Answers

Pass the HashiCorp Security Automation Certification VA-002-P Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam VA-002-P Premium Access

View all detail and faqs for the VA-002-P exam

Go to Exam

724 Students Passed

97% Average Score

95% Same Questions

Viewing page 2 out of 6 pages

Viewing questions 11-20 out of questions

Questions # 11:

What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?

Options:

CLI access from the same machine running Terraform

API access using the AppRole auth method

Vault provider

Integration with a tool like Jenkins

Answer

Explanation

The Vault provider allows Terraform to read from, write to, and configure Harshicorp Vault.

Questions # 12:

When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

Options:

a private install

disconnected

non-traditional

air-gapped

Answer

Explanation

A Terraform Enterprise install that is provisioned on a network that does not have Internet access is generally known as an air-gapped install. These types of installs require you to pull updates, providers, etc. from external sources vs. being able to download them directly.

Questions # 13:

A "backend" in Terraform determines how the state is loaded and how an operation such as apply is executed. Which of the following is not a supported backend type?

Options:

terraform enterprise

github

consul

artifactory

Answer

Explanation

github is not a supported backend type.

https://www.terraform.io/docs/backends/types/index.html

Questions # 14:

Select all Operating Systems that Terraform is available for. (select five)

Options:

Linux

Windows

Unix

FreeBSD

Solaris

macOS

Answer

A, B, D, E, F

Explanation

Terraform is available for macOS, FreeBSD, OpenBSD, Linux, Solaris, Windows

https://www.terraform.io/downloads.html

Questions # 15:

A user has created a module called "my_test_module" and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?

Options:

source = "git::https://wpexpertsupport.com/my_test_module.git#tag=v1.0.4 "

source = "git::https://wpexpertsupport.com/my_test_module.git@tag=v1.0.4 "

source = "git::https://wpexpertsupport.com/my_test_module.git?ref=v1.0.4 "

source = "git::https://wpexpertsupport.com/my_test_module.git &ref=v1.0.4"

Answer

Explanation

By default, Terraform will clone and use the default branch (referenced by HEAD) in the selected repository. You can override this using the ref argument:

module "vpc" {source = "git::https://wpexpertsupport.com/vpc.git?ref=v1.2.0 "}

The value of the ref argument can be any reference that would be accepted by the git checkout command, including branch and tag names.

https://www.terraform.io/docs/modules/sources.html#selecting-a-revision

Questions # 16:

Which of the following statements best describes the Terraform list(...) type?

Options:

a collection of unique values that do not have any secondary identifiers or ordering.

a collection of values where each is identified by a string label.

a sequence of values identified by consecutive whole numbers starting with zero.

a collection of named attributes that each have their own type.

Answer

Explanation

A terraform list is a sequence of values identified by consecutive whole numbers starting with zero.

https://www.terraform.io/docs/configuration/types.html#structural-types

Questions # 17:

Which of the following best describes a token accessor?

Options:

a value that acts as a reference to a token which can be used to perform limited actions against the token

a token used for Consul to access Vault auth methods

describes the value associated with the tokens TTL

a value that describes which clients have access to the attached token

Answer

Explanation

When tokens are created, a token accessor is also created and returned. This accessor is a value that acts as a reference to a token and can only be used to perform limited actions:

- Lookup a token's properties (not including the actual token ID)

- Lookup a token's capabilities on a path

- Renew the token

- Revoke the token

Reference link:- https://www.vaultproject.io/docs/concepts/tokens#token-accessors

Questions # 18:

If a client is currently assigned the following policy, what additional policy can be added to ensure they cannot access the data stored at secret/apps/confidential but still, read all other secrets?

Options:

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

path "secret/apps/*" {

capabilities = ["deny"]

}

path "secret/apps/confidential" {

capabilities = ["deny"]

}

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

path "secret/*" {

capabilities = ["read", "deny"]

}

Answer

Explanation

"Deny" capability generally takes precedence over "allow" capability.

Therefore, if you add the correct deny statement, the user will be able to read all secrets except for the data stored at secret/apps/confidential

Questions # 19:

Terraform has detailed logs which can be enabled by setting the _________ environmental variable.

Options:

TF_LOG

TF_TRACE

TF_DEBUG

TF_INFO

Answer

Explanation

Terraform has detailed logs that can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr.

You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN, or ERROR to change the verbosity of the logs. TRACE is the most verbose and it is the default if TF_LOG is set to something other than a log level name.

https://www.terraform.io/docs/internals/debugging.html

Questions # 20:

What happens when a terraform apply command is executed?

Options:

applies the changes required in the target infrastructure in order to reach the desired configuration

creates the execution plan for the deployment of resources

reconciles the state Terraform knows about with the real-world infrastructure

the backend is initialized and the working directory is prepped

Answer

Explanation

The terraform apply command is used to apply the changes required to reach the desired state of the configuration, or the pre-determined set of actions generated by a terraform plan execution plan.

Viewing page 2 out of 6 pages

Viewing questions 11-20 out of questions