Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
HashiCorp
HashiCorp Security Automation Certification
VA-002-P
HashiCorp Certified: Vault Associate Questions and Answers

Pass the HashiCorp Security Automation Certification VA-002-P Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam VA-002-P Premium Access

View all detail and faqs for the VA-002-P exam

Go to Exam

724 Students Passed

97% Average Score

95% Same Questions

Viewing page 4 out of 6 pages

Viewing questions 31-40 out of questions

Questions # 31:

Vault policies are deny by default

Options:

TRUE

FALSE

Answer

Explanation

Everything in Vault is path-based including policies. Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault.

Policies are deny by default, so an empty policy grants no permission in the system.

Questions # 32:

When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state does not become corrupt?

Options:

state locking

object storage

encryption

workspaces

Answer

Explanation

If supported by your backend, Terraform will lock your state for all operations that could write state. This prevents others from acquiring the lock and potentially corrupting your state.

State locking happens automatically on all operations that could write state. You won't see any message that it is happening. If state locking fails, Terraform will not continue. You can disable state locking for most commands with the -lock flag but it is not recommended.

Questions # 33:

In the example below, the depends_on argument creates what type of dependency?

1. esource "aws_instance" "example" {

2. ami = "ami-2757f631"

3. instance_type = "t2.micro"

4. depends_on = [aws_s3_bucket.company_data]

5. }

Options:

non-dependency resource

implicit dependency

explicit dependency

internal dependency

Answer

Explanation

Sometimes there are dependencies between resources that are not visible to Terraform. The depends_on argument is accepted by any resource and accepts a list of resources to create explicit dependencies for.

Questions # 34:

From the code below, identify the implicit dependency:

1. resource "aws_eip" "public_ip" {

2. vpc = true

3. instance = aws_instance.web_server.id

4. }

5. resource "aws_instance" "web_server" {

6. ami = "ami-2757f631"

7. instance_type = "t2.micro"

8. depends_on = [aws_s3_bucket.company_data]

9. }

Options:

The EC2 instance labeled web_server

The EIP with an id of ami-2757f631

The AMI used for the EC2 instance

The S3 bucket labeled company_data

Answer

Explanation

The EC2 instance labeled web_server is the implicit dependency as the aws_eip cannot be created until the aws_instance labeled web_server has been provisioned and the id is available.

Note that aws_s3_bucket.example is an explicit dependency.

Questions # 35:

Vault does not trust the storage backend.

Options:

False

True

Answer

Explanation

Storage backends are not trusted by Vault and are only expected to render durability. The storage backend is configured when starting the Vault server.

Reference link:- https://www.vaultproject.io/docs/internals/architecture

Questions # 36:

Using multi-cloud and provider-agnostic tools provides which of the following benefits? (select two)

Options:

operations teams only need to learn and manage a single tool to manage infrastructure, regardless of where the infrastructure is deployed

slower provisioning speed allows the operations team to catch mistakes before they are applied

can be used across major cloud providers and VM hypervisors

increased risk due to all infrastructure relying on a single tool for management

Answer

A, C

Explanation

Using a tool like Terraform can be advantageous for organizations deploying workloads across multiple public and private cloud environments. Operations teams only need to learn a single tool, single language, and can use the same tooling to enable a DevOps-like experience and workflows.

Questions # 37:

When Vault is sealed, which are the only two options available to a Vault administrator? (select two)

Options:

rotate the encryption key

unseal Vault

view the status of Vault

configure policies

author security policies

view data stored in the key/value store

Answer

B, C

Explanation

When Vault is sealed, the only two options available are, viewing the vault status and unsealing Vault. All the other actions performed after the Vault is unsealed and the user is authenticated.

Questions # 38:

What is the result of the following terraform function call?

index(["a", "b", "c"], "c")

Options:

true

Answer

Explanation

index finds the element index for a given value in a list starting with index 0.

https://www.terraform.io/docs/configuration/functions/index.html

Questions # 39:

Which three interfaces can be used to access Vault? (select three)

Options:

JSON

CLI

RPC

API

Consul

Answer

B, D, E

Explanation

Vault has three interfaces available.

The API can be used by a user or application, the CLI can be used by a user directly on the Vault server or remotely, and the UI can be used if it's been enabled in the configuration file.

Questions # 40:

What happens when a terraform plan is executed?

Options:

the backend is initialized and the working directory is prepped

creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.

applies the changes required in the target infrastructure in order to reach the desired configuration

reconciles the state Terraform knows about with the real-world infrastructure

Answer

Explanation

The terraform plan command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files.

After a plan has been run, it can be executed by running a terraform apply

Viewing page 4 out of 6 pages

Viewing questions 31-40 out of questions