최신 VA-002-P 무료덤프 - HashiCorp Certified: Vault Associate

문제1

After encrypting data using the transit secrets engine, you've received the following output. Which of the following is true based upon the output?
1. Key Value
2. --- -----
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

A. similar to the KV secrets engine, the transit secrets engine was enabled using the transit v2 option

B. this is the second version of the encrypted data

C. the data is stored in Vault using a KV v2 secrets engine

D. the original encryption key has been rotated at least once

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

From the unseal options listed below, select the options you can use if you're deploying Vault on-premises. (select four)

A. AWS KMS

B. HSM PKCS11

C. transit

D. key shards

E. certificates

정답: A,B,C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

In the following code snippet, the block type is identified by which string?
1. resource "aws_instance" "db" {
2. ami = "ami-123456"
3. instance_type = "t2.micro"
4. }

A. instance_type

B. resource

C. "db"

D. "aws_instance"

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Which of the following Vault policies will allow a Vault client to read a secret stored at secrets/applications/app01/api_key?

A. path "secrets/applications/" {
capabilities = ["read"]
allowed_parameters = {
"certificate" = []
}
}

B. path "secrets/applications/+/api_*" {
capabilities = ["read"]
}

C. path "secrets/*" {
capabilities = ["list"]
}

D. path "secrets/applications/app01/api_key" {
capabilities = ["update", "list"]
}

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제5

After decrypting data using the transit secrets engine, the plaintext output does not match the plaintext credit card number that you encrypted. Which of the following answers provides a solution?
1. $ vault write transit/decrypt/creditcard\ ciphertext="vault:v1:cZNHVx+sxdMErXRSuDa1q/pz49fXTn1PScKfhf+PIZPvy8xKfkytpwKcbC0fF2U=" \
2.
3. Key Value
4. --- -----
5. plaintext Y3JlZGl0LWNhcmQtbnVtYmVyCg==

A. The data is corrupted. Execute the encryption command again using a different data key

B. the user doesn't have permission to decrypt the data, therefore Vault returns false data so as not to reveal if the data was actually encrypted by Vault

C. Vault is sealed, therefore the data cannot be decrypted. Unseal Vault to properly decrypt the data

D. The resulting plaintext data is base64-encoded. To reveal the original plaintext, use the base64 --decode command.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which of the following storage backends are supported by HashiCorp technical support? (select four)

A. Consul

B. Filesystem

C. DynamoDB

D. MySQL

E. Raft

F. In-Memory

정답: A,B,E,F

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Given the Terraform configuration below, in which order will the resources be created?
1. resource "aws_instance" "web_server" {
2. ami = "i-abdce12345"
3. instance_type = "t2.micro"
4. }
5. resource "aws_eip" "web_server_ip" {
6. vpc = true
7. instance = aws_instance.web_server.id
8. }

A. resources will be created simultaneously

B. aws_eip will be created first
aws_instance will be created second

C. no resources will be created

D. aws_instance will be created first
aws_eip will be created second

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

What command is used to renew a token, if permitted?

A. vault token renew

B. vault update token

C. vault renew token <token-id>

D. vault operator token renew

E. vault token update

F. vault new <token-id>

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

The security barrier protects all of the following Vault components except ___.

A. audit devices

B. storage backend

C. token store

D. auth method

E. secret engine

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which of the following unseal options can automatically unseal Vault upon the start of the Vault service? (select four)

A. AWS KMS

B. Key Shards

C. Transit

D. HSM

E. Azure KMS

정답: A,C,D,E

설명: (DumpTOP 회원만 볼 수 있음)

최신 VA-002-P 무료덤프 - HashiCorp Certified: Vault Associate

우리와 연락하기

유용한 링크

최신 업데이트