New Year Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

HashiCorp VA-002-P - HashiCorp Certified: Vault Associate

HashiCorp VA-002-P Premium Access     Download Demo    
Page: 4 / 6
Total 200 questions

An application requires a specific key/value to be updated in order to process a batch job. The value should be either "true" or "false". However, when developers have been updating the value, sometimes they mistype the value or capitalize on the value, causing the batch job not to run. What feature of a Vault policy can be used in order to restrict the entry to the required values?

A.

added an allowed_parameters value to the policy

B.

use a * wildcard at the end of the policy

C.

change the policy to include the list capability

D.

add a deny statement for all possible misspellings of the value

Select the most accurate statement to describe the Terraform language from the following list.

A.

Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSON.

B.

Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.

C.

Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.

D.

Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAML.

Why is it a good idea to declare the required version of a provider in a Terraform configuration file?

1. terraform {

2. required_providers {

3. aws = "~> 1.0"

4. }

5. }

A.

to remove older versions of the provider

B.

to ensure that the provider version matches the version of Terraform you are using

C.

providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes

D.

to match the version number of your application being deployed via Terraform

Which of the following is not an activity associated with the Vault transit secrets engine?

A.

encrypt

B.

decrypt

C.

update

D.

rewrap

Why might a user opt to include the following snippet in their configuration file?

1. terraform {

2. required_version = ">= 0.12"

3. }

A.

this ensures that all Terraform providers are above a certain version to match the application being deployed

B.

the user wants to ensure that the application being deployed is a minimum version of 0.12

C.

versions before Terraform 0.12 were not approved by HashiCorp to be used in production

D.

Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration

Complete the following sentence:

For the local state, the workspaces are stored directly in a...

A.

a file called terraform.tfstate

B.

directory called terraform.workspaces.tfstate

C.

directory called terraform.tfstate.d

D.

a file called terraform.tfstate.backup

Which of the following statements best describes the Terraform list(...) type?

A.

a collection of unique values that do not have any secondary identifiers or ordering.

B.

a collection of values where each is identified by a string label.

C.

a sequence of values identified by consecutive whole numbers starting with zero.

D.

a collection of named attributes that each have their own type.

Select all features which are exclusive to Terraform Enterprise. (select three)

A.

Audit Logs

B.

Cost Estimation

C.

Sentinel

D.

Clustering

E.

SAML/SSO

Which of the following best describes the default local backend?

A.

The local backend stores state on the local filesystem locks the state using system APIs and performs operations locally.

B.

The local backend is the directory where resources deployed by Terraform have direct access to in order to update their current state

C.

The local backend is how Terraform connects to public cloud services, such as AWS, Azure, or GCP.

D.

The local backend is where Terraform Enterprise stores logs to be processed by a log collector

Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

A.

FALSE

B.

TRUE