Practice Vault-Associate Exam Online

Question 1

You've deployed Vault in your production environment and are curious to understand metrics on your Vault cluster, such as the number of writes to the backend, the status of WALs, and the seal status. What feature would you configure in order to view these metrics?

A : audit device

B : telemetry

C : nothing to configure, these are available in the Vault log found on the OS

D : enable logs for each individual secrets engines

Answer: B

Question 2

By default, the max TTL for a token is how many days?

A : 14 days

B : 32 days

C : 31 days

D : 7 days

Answer: B

Question 3

Which of the following secrets engines does NOT issue a lease upon a read request?

A : AWS

B : Consul

C : KV

D : database

Answer: C

Question 4

When architecting a Vault replication configuration, why should you never terminate TLS on a frontend load balancer?

A : If Vault detects that the traffic has been unencrypted and re-encrypted, due to the load balancer, it will automatically drop the traffic as it is no longer trusted

B : Vault generates self-signed mutual TLS for replication. If the LB is performing TLS termination, this will break the mutual TLS between nodes

C : Vault requires that only Consul service discovery can be used to direct traffic to an active Vault node

D : Vault replication won't work with the type of certificates that a traditional load balancer uses

Answer: B

Question 5

What happens to child tokens when a parent token is revoked?

A : the child tokens are renewed

B : the child tokens are converted to parent tokens

C : the child tokens create their own child tokens to be used

D : the child tokens are revoked

Answer: D

Name:	HashiCorp Certified: Vault Associate (002)
Exam Code:	Vault-Associate
Certification:	HashiCorp Security Automation
Vendor:	HashiCorp
Total Questions:	328
Last Updated:	May 06, 2024

HashiCorp Vault-Associate