New Year Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

HashiCorp VA-002-P - HashiCorp Certified: Vault Associate

Page: 6 / 6
Total 200 questions

The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at aws/

A.

False

B.

True

Which of the following storage backends are supported by HashiCorp technical support? (select four)

A.

Filesystem

B.

Consul

C.

In-Memory

D.

Raft

E.

DynamoDB

F.

MySQL

Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)

A.

output.tf

B.

terraform.tfstate

C.

terraform.tfvars

D.

variables.tf

Which of the following best describes a token accessor?

A.

a value that acts as a reference to a token which can be used to perform limited actions against the token

B.

a token used for Consul to access Vault auth methods

C.

describes the value associated with the tokens TTL

D.

a value that describes which clients have access to the attached token

When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module?

For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

A.

configure an output value in the application module in order to use that value for the DNS module

B.

preconfigure the IP address as a parameter in the DNS module

C.

configure the pertinent provider's configuration with a list of possible IP addresses to use

D.

export the value using terraform export and input the value using terraform input

From the unseal options listed below, select the options you can use if you're deploying Vault on-premises. (select four)

A.

transit

B.

AWS KMS

C.

certificates

D.

key shards

E.

HSM PKCS11

A user has created a module called "my_test_module" and committed it to GitHub. Over time, several commits have been made with updates to the module, each tagged in GitHub with an incremental version number. Which of the following lines would be required in a module configuration block in terraform to select tagged version v1.0.4?

A.

source = "git::https://wpexpertsupport.com/my_test_module.git#tag=v1.0.4 "

B.

source = "git::https://wpexpertsupport.com/my_test_module.git@tag=v1.0.4 "

C.

source = "git::https://wpexpertsupport.com/my_test_module.git?ref=v1.0.4 "

D.

source = "git::https://wpexpertsupport.com/my_test_module.git &ref=v1.0.4"

Vault configuration files can be written in what languages? (select two)

A.

XML

B.

JSON

C.

YAML

D.

HCL

Which auth method is ideal for machine to machine authentication?

A.

GitHub

B.

UserPass

C.

AppRole

D.

Okta

What Terraform feature is shown in the example below?

1. resource "aws_security_group" "example" {

2. name = "sg-app-web-01"

3. dynamic "ingress" {

4. for_each = var.service_ports

5. content {

6. from_port = ingress.value

7. to_port = ingress.value

8. protocol = "tcp"

9. }

10. }

11. }

A.

data source

B.

dynamic block

C.

local values

D.

conditional expression