Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
HashiCorp
HashiCorp Security Automation Certification
VA-002-P
HashiCorp Certified: Vault Associate Questions and Answers

Pass the HashiCorp Security Automation Certification VA-002-P Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam VA-002-P Premium Access

View all detail and faqs for the VA-002-P exam

Go to Exam

724 Students Passed

97% Average Score

95% Same Questions

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions

Questions # 41:

By default, how long does the transit secrets engine store the resulting ciphertext?

Options:

24 hours

32 days

transit does not store data

30 days

Answer

Explanation

Vault does NOT store any data encrypted via the transit/encrypt endpoint. The output you received is the ciphertext. You can store this ciphertext at the desired location (e.g. MySQL database) or pass it to another application.

Questions # 42:

A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?

Options:

add read permissions to the path secrets/apps

modify the policy to allow the create permission

remove the deny policy blocking access to the secrets/apps/app1 path

add LIST to the policy so the user can browse the paths leading up to the key/value's path

Answer

Explanation

To view the paths leading up to the secrets/apps/app1 path in the user interface, the user must have at least LIST permissions to avoid permission denied error in the UI.

Questions # 43:

Which of the following commands will launch the Interactive console for Terraform interpolations?

Options:

terraform

terraform console

terraform cmdline

terraform cli

Answer

Explanation

The terraform console command provides an interactive console for evaluating expressions.

https://www.terraform.io/docs/commands/console.html

Questions # 44:

In Terraform Enterprise, a workspace can be mapped to how many VCS repos?

Options:

Answer

Explanation

A workspace can only be configured to a single VCS repo, however, multiple workspaces can use the same repo, if needed. A good Explanation: of how to configure your code repositories can be found here.

Questions # 45:

Select all features which are exclusive to Terraform Enterprise. (select three)

Options:

Audit Logs

Cost Estimation

Sentinel

Clustering

SAML/SSO

Answer

A, D, E

Explanation

Sentinel and Cost Estimation are both available in Terraform Cloud, though not at the free tier level.

Questions # 46:

Which of the following is considered a Terraform plugin?

Options:

Terraform logic

Terraform language

Terraform tooling

Terraform provider

Answer

Explanation

Terraform is built on a plugin-based architecture. All providers and provisioners that are used in Terraform configurations are plugins, even the core types such as AWS and Heroku. Users of Terraform are able to write new plugins in order to support new functionality in Terraform.

Questions # 47:

Which is not a benefit of running HashiCorp Vault in your environment?

Options:

Integrate with your code repository to pull secrets when deploying your applications

Consolidate static, long-lived passwords used throughout your organization

Act as root or intermediate certificate authority to automate the generation of PKI certificates

The ability to generate dynamic secrets for applications and resource access

Answer

Explanation

Vault does not integrate with any VCS (Version Control System) to checkout or read code. However, It can use GitHub as an auth method.

Questions # 48:

True or False:

The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If the drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.

Options:

False

True

Answer

Explanation

The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. This can be used to detect any drift from the last-known state, and to update the state file.

This does not modify infrastructure but does modify the state file. If the state is changed, this may cause changes to occur during the next plan or apply.

https://www.terraform.io/docs/commands/refresh.html

Questions # 49:

In regards to Terraform state file, select all the statements below which are correct: (select four)

Options:

storing state remotely can provide better security

the Terraform state can contain sensitive data, therefore the state file should be protected from unauthorized access

Terraform Cloud always encrypts state at rest

using the mask feature, you can instruct Terraform to mask sensitive data in the state file

when using local state, the state file is stored in plain-text

the state file is always encrypted at rest

Answer

A, B, C, E

Explanation

Terraform state can contain sensitive data, depending on the resources in use and your definition of "sensitive." The state contains resource IDs and all resource attributes. For resources such as databases, this may contain initial passwords.

When using local state, state is stored in plain-text JSON files.

If you manage any sensitive data with Terraform (like database passwords, user passwords, or private keys), treat the state itself as sensitive data.

Storing Terraform state remotely can provide better security. As of Terraform 0.9, Terraform does not persist state to the local disk when remote state is in use, and some backends can be configured to encrypt the state data at rest.

Questions # 50:

Which of the following best describes a Terraform provider?

Options:

describes an infrastructure object, such as a virtual network, compute instance, or other components

a container for multiple resources that are used together

serves as a parameter for a Terraform module that allows a module to be customized

a plugin that Terraform uses to translate the API interactions with the service or provider

Answer

Explanation

A provider is responsible for understanding API interactions and exposing resources. Providers generally are an IaaS (e.g., Alibaba Cloud, AWS, GCP, Microsoft Azure, OpenStack), PaaS (e.g., Heroku), or SaaS services (e.g., Terraform Cloud, DNSimple, CloudFlare).

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions