Get Instant Access to Vault-Associate-002 Practice Exam Questions
Reliable Study Materials & Testing Engine for Vault-Associate-002 Exam Success!
NEW QUESTION # 32
Which of the following statements describe the CLI command below?
$ vault login -method=ldap username=mitchellh
- A. Generates a token which is response wrapped
- B. Fails because the password is not provided
- C. By default, the generated token is valid for 24 hours
- D. You will be prompted to enter the password
Answer: D
NEW QUESTION # 33
What is not a function provided by Vault's transit secret engine?
- A. None of the above
- B. Verifying signed data
- C. Generating random bytes
- D. Encrypting data
- E. Storing ciphertext data
Answer: E
NEW QUESTION # 34
To encrypt your secret with the transit secrets engine, you must send the Base32-encoded plaintext to Vault.
- A. True
- B. False
Answer: B
NEW QUESTION # 35
Examine the command below. Output has been trimmed.
Which of the following statements describe the command and its output?
- A. Generated token's TTL is 60 hours
- B. Configures the AppRole auth method with user specified role ID and secret ID
- C. Generated token is an orphan token which can be renewed indefinitely
- D. Missing a default token policy
Answer: B
NEW QUESTION # 36
The Vault encryption key is stored in Vault's backend storage.
- A. True
- B. False
Answer: B
NEW QUESTION # 37
Hotspot Question
Where do you define the Namespace to log into using the Vault UI?
To answer this question
Use your mouse to click on the screenshot in the location described above. An arrow indicator will mark where you have clicked. Click the "Answer" button once you have positioned the arrow to answer the question. You may need to scroll down to see the entire screenshot.
Answer:
Explanation:
Explanation:
The namespace is the field that is located above the method field in the Vault UI, , you would place your click in the text box directly beside the "Namespace" label to indicate where a user would enter the namespace information.
Reference: https://developer.hashicorp.com/vault/docs/enterprise/namespaces
NEW QUESTION # 38
Where does the Vault Agent store its cache?
- A. In an unencrypted file
- B. In a file encrypted using the Vault transit secret engine
- C. In memory
- D. In the Vault key/value store
Answer: C
NEW QUESTION # 39
What is the Vault CLI command to query information about the token the client is currently using?
- A. vault lookup self
- B. vault self lookup
- C. vault token lookup
- D. vault lookup token
Answer: C
NEW QUESTION # 40
What environment variable overrides the CLI's default Vault server address?
- A. VAULT_ADDRESS
- B. VAULT_HTTPS_ADDRESS
- C. VAULT_ADDR
- D. VAULT_HTTP_ADDRESS
Answer: C
NEW QUESTION # 41
Which command will generate a new transit key?
- A. vault write -f transit/keys/my-key
- B. vault create -f transit/keys/my-key
- C. vault put transit/keys/my-key
- D. vault create transit/keys/my-key
Answer: A
NEW QUESTION # 42
What attributes are unique to batch tokens? (Choose three.)
- A. Are persisted
- B. Cannot be renewed
- C. Can be periodic
- D. Have a set time-to-live (TTL)
- E. Are not persisted
Answer: B,D,E
NEW QUESTION # 43
What is a secret in the context of Vault?
- A. HTTP session token that provides authorization to Vault
- B. Anything stored or returned that contains confidential material
- C. Engine responsible for logging all requests and responses
- D. Threshold of keys required to unseal the Vault
Answer: B
NEW QUESTION # 44
An organization would like to use a scheduler to track & revoke access granted to a job (by Vault) at completion.
What auth-associated Vault object should be tracked to enable this behavior?
- A. Token accessor
- B. Authentication method
- C. Token ID
- D. Lease ID
Answer: A
NEW QUESTION # 45
Hotspot Question
For the following statements, choose which secrets engine enables the use case.
Each answer should only be used once.
Answer:
Explanation:
NEW QUESTION # 46
Which Vault secret engine may be used to build your own internal certificate authority?
- A. PKI
- B. Transit
- C. PostgreSQL
- D. Generic
Answer: A
NEW QUESTION # 47
A user issues the following cURI command to encrypt data using the transit engine and the Vault API:
Which payload.json file has the correct contents?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 48
Use this screenshot to answer the question below:
Which statement describes this AppRole auth method configuration?
- A. It is enabled at "auth_approle_f23dd79f" path
- B. Generates batch tokens with TTL set to 5 minutes
- C. Generates multiple tokens with TTL set to 5 minutes
- D. It is enabled at "App1" path
Answer: B
NEW QUESTION # 49
......
Validate your Skills with Updated Vault-Associate-002 Exam Questions & Answers and Test Engine: https://www.passtorrent.com/Vault-Associate-002-latest-torrent.html
Tested & Approved Vault-Associate-002 Study Materials Download: https://drive.google.com/open?id=1gmqG9cSOEEP7qOgT_lOFL0BtHOvdBTwD