(2024) VA-002-P Dumps and Practice Test (202 Questions) [Q75-Q97]

Q75. As opposed to service tokens, batch tokens are ideal for what type of action?

Q76. Which is not a capability that can be used when writing a Vault policy?

Q77. When writing the Terraform code, HashiCorp recommends that you use how many spaces between each nesting level?

Q78. Which of the following best describes the default local backend?

Q79. What is the result of the following Vault command?
vault auth enable userpass

Q80. What Terraform command can be used to inspect the current state file?

Q81. The following is a snippet from a Terraform configuration file:
1. provider “aws” {
2. region = “us-east-1”
3. }
4. provider “aws” {
5. region = “us-west-1”
6. }
which, when validated, results in the following error:-
1. Error: Duplicate provider configuration
2.
3. on main.tf line 5:
4. 5: provider “aws” {
5.
6. A default provider configuration for “aws” was already given at
7. main.tf:1,1-15. If multiple configurations are required, set the “______”
8. argument for alternative configurations.
Fill in the blank in the error message with the correct string from the list below.

Q82. Which of the following best describes a token accessor?

Q83. True or False:
Similar to how Vault works with databases and cloud providers, the Active Directory secrets engine dynamically generates the account and password for the requesting Vault client.

Q84. Which TCP port does Vault use, by default, for its API and UI?

Q85. True or False:
A list(…) may contain a number of values of the same type while an object(…) can contain a number of values of different types.

Q86. When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state does not become corrupt?

Q87. Which command is used to initialize Vault after first starting the Vault service?

Q88. From the answers below, select the advantages of using Infrastructure as Code. (select four)

Q89. When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module?
For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

Q90. Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

Q91. True or False:
Once you create a KV v1 secrets engine and place data in it, there is no way to modify the mount to include the features of a KV v2 secrets engine.

Q92. By default, where does Terraform store its state file?

Q93. After encrypting data using the transit secrets engine, you’ve received the following output. Which of the following is true based upon the output?
1. Key Value
2. — —–
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

Q94. Which of the following is considered a Terraform plugin?

Q95. You’ve logged into the Vault CLI and attempted to enable an auth method, but received this error message. What can be done to resolve the error and configure Vault?
Error enabling userpass auth: Post https://127.0.0.1:8200/v1/sys/auth/userpass: http: server gave HTTP response to HTTPS client

Q96. An application is trying to use a secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?

Q97. Which auth method is ideal for machine to machine authentication?