[2026] HashiCorp Certified: Vault Associate (002) - Vault-Associate-002 무료 시험 문제

문제1

Where can you set the Vault seal configuration? (Choose two.)

A. Vault API

B. Environment variables

C. Cloud Provider KMS

D. Vault CLI

E. Vault configuration file

정답: B,E

문제2

Which of the following storage backends supports high availability?

A. Azure Storage Container

B. Manta

C. Amazon S3

D. Consul

정답: D

문제3

Use this screenshot to answer the question below:

Where on this page would you click to view a secret located at secret/my-secret?

A. Option C

B. Option E

C. Option D

D. Option A

E. Option B

정답: C

문제4

Which of the following statements explains the benefit of response wrapping? Choose TWO correct answers.

A. Limits the time of secret exposure by having a short-lived wrapping token

B. It protects Vault's master key

C. Only the reference to the secrets is transmitted over the public network

D. Limits the size of secrets to be transmitted over the network

E. Allow versioning of the secrets

정답: A,C

문제5

Which of these is not a benefit of dynamic secrets?

A. Ensures that administrators can see every password used

B. Minimizes damage of credentials leaking

C. Replaces cumbersome password rotation tools and practices

D. Supports systems which do not natively provide a method of expiring credentials

정답: A

문제6

An authentication method should be selected for a use case based on:

A. The strongest available cryptographic hash for the use case

B. Compatibility with the secret engine which is to be used

C. The auth method that best establishes the identity of the client

D. The cloud provider for which the client is located on

정답: C

문제7

Which of the following statements describe the secrets engine in Vault? (Choose three.)

A. Some secrets engines simply store and read data

B. Once enabled, you cannot disable the secrets engine

C. Each secrets engine is isolated to its path

D. A secrets engine cannot be enabled at multiple paths

E. You can build your own custom secrets engine

정답: A,C,E

문제8

You manage two Vault dusters: "vaultduster1.acme.corp" and "vaultduster2.acme.corp". You want to write a secret to the first Vaultcluster vaultcluster1.acme.corp and run vault kv put secret/foo value='bar'. The command times out and the error references the Vault cluster, "vaultcluster2.acme.corp".
You run the command again with the following address flag:
vault kv put -address='https://vaultcluster1.acme.corp' secret/foo
value='bar'
The command completes successfully. You find that the terminal session defines the environment variable VAULT_ADDR='https://vaultcluster2.acxe.corp:8200' Why was the second attempt successful?

A. Environment variables take precedence over flags

B. Vault listener is misconfigured

C. VAULT_CLUSTER_ADDRneeds to be provided

D. Flags take precedence over environment variables

정답: D

문제9

Which of the following is the correct option to authenticate to Vault using a token using the CLI?

A. vault <token>

B. A token can be used to authenticate to Vault through the API, not the CLI or the UI vault login

C. A token cannot be used to authenticate to Vault

정답: A

HashiCorp Certified: Vault Associate (002) - Vault-Associate-002무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트