최신 HCVA0-003 무료덤프 - HashiCorp Certified: Vault Associate (003)Exam

문제1

Without logging into another interface, what feature can Chad use to execute a simple CLI command to enable a new secrets engine?

A. CLI emulation in the Vault UI (Feature 1)

B. User information button (Feature 2)

C. Access management link (Feature 4)

D. Client count details (Feature 3)

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

What API endpoint is used to enable and configure a secrets engine?

A. /v1/sys/plugins/catalog

B. /v1/sys/init

C. /v1/sys/config

D. /v1/sys/mounts

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

From the options below, select the benefits of using the PKI (x.509 certificates) secrets engine (select three):

A. Reducing, or eliminating certificate revocations

B. Reduces time to get a certificate by eliminating the need to generate a private key and CSR

C. TTLs on Vault certs are longer to ensure certificates are valid for a longer period of time

D. Vault can act as an intermediate CA

정답: A,B,D

문제4

You are using an orchestrator to deploy a new application. Even though the orchestrator creates anew AppRole secret ID, security requires that only the new application has the combination of the role ID and secret ID. What feature can you use to meet these requirements?

A. Use a batch token instead of a traditional service token

B. Have the application authenticate with the role ID to retrieve the secret ID

C. Secure the communication between the orchestrator and Vault using TLS

D. Use response wrapping and provide the application server with the unwrapping token instead

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Hanna is working with Vault and has been assigned a namespace called integration, where she stores all her secrets. Hanna configured her application to use the following API request, but the request is failing. What changes below will help Hanna correctly retrieve the secret? (Select two)
$ curl \
--header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" \
--request GET \
https://vault.example.com:8200/v1/secret/data/my-secret

A. $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --header "X-Vault-Namespace:
integration" --request GET https://vault.example.com:8200/v1/secret/data/my-secret

B. $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET --namespace
"integration" https://vault.example.com:8200/v1/secret/data/my-secret

C. $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET https://vault.
example.com:8200/v1/integration/secret/data/my-secret

D. $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET\integration
https://vault.example.com:8200/v1/secret/data/my-secret

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which of the following are valid types of tokens available in Vault? (Select five)

A. Orphan service token

B. Periodic service token

C. Root token

D. Primary token

E. Batch token

F. Service token

정답: A,B,C,E,F

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?

A. ####hvs.Jw9LMpu7oCQgxiKbjfyzyg75 - TTL: 4 hours (child of B)

B. ####hvs.FNiIFU14RUxxUYAl4ErLfPVR - TTL: 6 hours

C. ####hvs.3IrlhEvcerEGbae11YQf9FvI - TTL: 3 hours

D. ####hvs.y4fUERqCtUV0xsQjWLJar5qX - TTL: 4 hours

E. ####hvs.hOpweMVFvqfvoVnNgvZq8jLS - TTL: 5 hours (child of D)

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which core component of Vault can store, generate, or encrypt data for organizations?

A. secrets engine

B. storage backend

C. audit device

D. auth method

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

What occurs when a Vault cluster cannot maintain a quorum while using the Integrated Storage backend?

A. The cluster becomes unavailable and cannot commit new logs

B. Vault automatically promotes a standby node to a leader to restore quorum

C. Vault continues to operate in read-only mode until quorum is restored

D. Vault temporarily switches to local storage until quorum is regained

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

True or False? All Vault policies are deny by default.

A. True

B. False

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제11

You have enabled the Transit secrets engine on your Vault cluster to provide an "encryption as a service" service as your team develops new applications. What is a prime use case for the Transit secrets engine?

A. Creating X.509 certificates for a new fleet of containers

B. Generating dynamic SSH credentials for access to local systems

C. Encrypting data before being written to an Amazon S3 bucket

D. Storing the encrypted data in Vault for easy retrieval

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제12

A developer has requested access to manage secrets at the path kv/apps/webapp01. You create the policy below which gives them the proper access:
path "kv/apps/webapp01" {
capabilities = ["read", "create", "update", "list"]
}
However, when the developer logs in to the Vault UI, they see the following screenshot and cannot access the desired secret. Why can't the developer see the secrets they need?

A. The secrets are stored under the cubbyhole secrets engine, so the developer should browse to that secrets engine

B. The policy doesn't permit list access to the paths prior to the secret so the Vault UI doesn't display the mount path

C. The key/value secrets engine isn't available in the Vault UI, therefore the developer should use a different Vault interface instead

D. The Vault UI isn't enabled for the developer, therefore they will only see the default options

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제13

What is true about the output of the following command (select three)?

A. All three users, Jane/John/Student01, will receive all unseal keys and can unseal Vault

B. The keys will be returned encrypted

C. The admin never sees all the unseal keys and cannot unseal Vault by themselves

D. Each individual can only decrypt their own unseal key using their private PGP key

E. The admin will receive the unseal keys and be able to unseal Vault themselves

정답: B,C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

You are using the Vault API to test authentication before modifying your CI/CD pipeline to properly authenticate to Vault. You manually authenticate to Vault and receive the response below. Based on the provided options, which of the following are true? (Select four)
* $ curl \
* --request POST \
* --data @payload.json \
* https://vault.krausen.com:8200/v1/auth/userpass/login/bryan.krausen | jq
* *******************************************************************************
* ******* RESPONSE BELOW ********************************************************
* *******************************************************************************
* {
* "request_id": "f758e8da-11b6-8341-d404-56f0c370a7fa",
* "lease_id": "",
* "renewable": false,
* "lease_duration": 0,
* "data": null,
* "wrap_info": null,
* "warnings": null,
* "auth": {
* "client_token": "hvs.CbzCNJCVWt63jyzyaJakgDwz",
* "accessor": "rffwXzKFcxvaQi6Vgo8tY4Lt",
* "policies": [
* "training",
* "default"
* ],
* "token_policies": [
* "training",
* "default"
* ],
* "metadata": {
* "username": "bryan.krausen"
* },
* "lease_duration": 84600,
* "renewable": true,
* "entity_id": "f1795f6a-c576-d619-b2d5-74c0aee08edb",
* "token_type": "service",
* "orphan": true
* }
* }

A. The user's password is stored in a file named payload.json

B. The token required to retrieve a secret is hvs.CbzCNJCVWt63jyzyaJakgDwz

C. The user is using the userpass auth method

D. The user needs to retrieve .auth.client_token in order to perform other actions

E. The accessor will be used to authenticate to Vault to retrieve secrets

F. The returned token is a batch token

정답: A,B,C,D

설명: (DumpTOP 회원만 볼 수 있음)

최신 HCVA0-003 무료덤프 - HashiCorp Certified: Vault Associate (003)Exam

우리와 연락하기

유용한 링크

최신 업데이트