VA-002-P Online Practice Questions and Answers

Vault configuration files can be written in what languages? (select two)

A. XML

B. JSON

C. YAML

D. HCL

An administrator wants to create a new KV mount for individual users to maintain their own secrets but needs a way to simplify the policy so they don't need to write a new one for each new user? With the requirements listed below, what would such a policy look like? Requirement: Each user can perform all operations on their allocated key/value secret path

A. path "user-kv/data/{{identity.entity.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

B. path "user-kv/data/{{identity.entity.id.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

C. path "user-kv/data/{{identity.entity.aliases.<>.id}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

D. path "user-kv/data/{{user}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

You are deploying Vault in a local data center, but want to be sure you have a secondary cluster in the event the primary cluster goes offline. In the secondary data center, you have applications that are running, as they are architected to run active/active. Which type of replication would be best in this scenario?

A. disaster recovery replication

B. single-node replication

C. performance replication

D. end-to-end replication

After enabling the vault to autocomplete feature, you type vault and press the tab button, but nothing happens. Why doesn't vault display the available completions?

1.

$ vault -autocomplete-install

2.

$ vault

A. your SSH client doesn't support autocompletion

B. the SSH session needs to be restarted upon installation

C. you don't have the permissions to use autocomplete

D. you didn't use -force when enabling the feature

What is the proper command to enable the AWS secrets engine at the default path?

A. vault enable secrets aws

B. vault secrets aws enable

C. vault secrets enable aws

D. vault enable aws secrets engine

Select two answers to complete the following sentence:

Before a new provider can be used, it must be ______ and _______.

A. approved by HashiCorp

B. declared in the configuration

C. initialized

D. uploaded to source control

What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)

A. Requests for infrastructure or hardware required a ticket, increasing the time required to deploy applications

B. Traditional deployment methods are not able to meet the demands of the modern business where resources tend to live days to weeks, rather than months to years

C. Traditionally managed infrastructure can't keep up with cyclic or elastic applications

D. Pointing and clicking in a management console is a scalable approach and reduces human error as businesses are moving to a multi-cloud deployment model

Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires __________?

A. a TOTP token

B. a username and password

C. authentication using MFA

D. an API token

Which of the following is not a valid Terraform string function?

A. tostring

B. replace

C. format

D. join

The Terraform language supports a number of different syntaxes for comments. Select all that are supported. (select three)

A. #

B. /* and */

C. <* and *>

D. //