[Oct-2022] VA-002-P Free Sample Questions to Practice One Year Update [Q18-Q33]

4/5 - (1 vote)

[Oct-2022] VA-002-P Free Sample Questions to Practice One Year Update

Download VA-002-P exam with HashiCorp VA-002-P Real Exam Questions

NEW QUESTION 18
Which flag would be used within a Terraform configuration block to identify the specific version of a provider required?

required-provider

required_versions

required_providers

required-version

NEW QUESTION 19
A user creates three workspaces from the command line – prod, dev, and test. Which of the following commands will the user run to switch to the dev workspace?

terraform workspace select dev

terraform workspace -switch dev

terraform workspace dev

terraform workspace switch dev

NEW QUESTION 20
Which type of Vault replication copies all data from Vault, including K/V data, policies, and client tokens?

DR replication

performance replication

failover replication

online replication

NEW QUESTION 21
True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

False

True

NEW QUESTION 22
When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other relevant data are not inadvertently shared with others. What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)

directly querying HashiCorp Vault for the secrets

command-line key/value pairs

use the -backend-config=PATH to specify a separate config file

interactively on the command line

NEW QUESTION 23
Beyond encryption and decryption of data, which of the following is not a function of the Vault transit secrets engine?

generate hashes and HMACs of data

sign and verify data

act as a source of random bytes

store the encrypted data securely in Vault for retrieval

NEW QUESTION 24
When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?

terraform apply

terraform plan

terraform init

terraform delete

NEW QUESTION 25
From the answers below, select the advantages of using Infrastructure as Code. (select four)

Easily integrate with application workflows (GitLab Actions, Azure DevOps, CI/CD tools)

Safely test modifications using a “dry run” before applying any actual changes

Provide reusable modules for easy sharing and collaboration

Easily change and update existing infrastructure

Provide a codified workflow to develop customer-facing applications

NEW QUESTION 26
When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

a private install

disconnected

non-traditional

air-gapped

NEW QUESTION 27
After a client has authenticated, what security feature is used to make subsequent calls?

key shard

ldap

pgp

token

listener

path

NEW QUESTION 28
Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

terraform format

terraform validate

terraform fmt

terraform show

NEW QUESTION 29
What happens when a terraform apply command is executed?

applies the changes required in the target infrastructure in order to reach the desired configuration

creates the execution plan for the deployment of resources

reconciles the state Terraform knows about with the real-world infrastructure

the backend is initialized and the working directory is prepped

NEW QUESTION 30
An application is trying to use a secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?

request a new secret and associated lease

try the expired secret in hopes it hasn’t been deleted yet

request the TTL be extended for the secret

perform a lease renewal

NEW QUESTION 31
The userpass auth method has the ability to access external services in order to provide authentication to Vault.

FALSE

TRUE

NEW QUESTION 32
Vault policies are deny by default

TRUE

FALSE

NEW QUESTION 33
After encrypting data using the transit secrets engine, you’ve received the following output. Which of the following is true based upon the output?
1. Key Value
2. — —–
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

the original encryption key has been rotated at least once

this is the second version of the encrypted data

similar to the KV secrets engine, the transit secrets engine was enabled using the transit v2 option

the data is stored in Vault using a KV v2 secrets engine

HashiCorp VA-002-P Exam Syllabus Topics:

Topic	Details
Topic 1	Describe Shamir secret sharing and unsealing Craft a Vault policy based on requirements Describe Vault policy syntax: capabilities
Topic 2	Configure transit secret engine Compare authentication methods Illustrate the value of Vault policy
Topic 3	Describe secrets caching Configure Vault policies Explain orphaned tokens Configure Vault policies
Topic 4	Access Vault secrets via Curl Manage Vault leases Define token accessors Create Vault policies
Topic 5	Differentiate between service and batch tokens. Choose one based on use-case Describe authentication methods
Topic 6	Explain encryption as a service Explain response wrapping Explain Vault architecture Authenticate to Vault
Topic 7	Explain the value of short-lived, dynamically generated secrets Choose an authentication method based on use case