Real HashiCorp VA-002-P Exam Questions Study Guide [Q72-Q88]

Q72. Your organization is running Vault open source and has decided it wants to use the Identity secrets engine. You log into Vault but are unable to find it in the list to enable. What gives?

because you are running open-source and the identity secrets engine is an Enterprise feature, it is not available to enable.

the identity secrets engine was deprecated in previous versions

this secrets engine will be mounted by default.

the policy attached to your user doesn’t allow access to the Identity secrets engine.

Q73. After a client has authenticated, what security feature is used to make subsequent calls?

key shard

ldap

pgp

token

listener

path

Q74. Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
1. terraform {
2. required_providers {
3. aws = “~> 1.0”
4. }
5. }

to remove older versions of the provider

to ensure that the provider version matches the version of Terraform you are using

providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes

to match the version number of your application being deployed via Terraform

Q75. From the answers below, select the advantages of using Infrastructure as Code. (select four)

Easily integrate with application workflows (GitLab Actions, Azure DevOps, CI/CD tools)

Safely test modifications using a “dry run” before applying any actual changes

Provide reusable modules for easy sharing and collaboration

Easily change and update existing infrastructure

Provide a codified workflow to develop customer-facing applications

Q76. After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?

the resource will be destroyed and recreated

the resource will be created

Terraform can’t determine how to proceed due to a problem with the state file

the resource will be updated in place

Q77. Vault does not trust the storage backend.

False

True

Q78. After creating a dynamic credential on a database, the DBA accidentally deletes the credentials on the database itself. When attempting to remove the lease, Vault returns an error stating that the credential cannot be found. What command can be run to coerce Vault to remove the secret?

vault lease -renew

vault lease revoke -force -prefix <lease_path>

vault revoke -apply

vault lease revoke -enforce

Q79. What feature of Terraform Cloud and/or Terraform Enterprise can you publish and maintain a set of custom modules which can be used within your organization?

custom VCS integration

remote runs

private module registry

Terraform registry

Q80. You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext=”1234 5678 9101 1121″
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

credit card numbers are not supported using the transit secrets engine since it is considered sensitive data

the token used to issue the encryption request does not have the appropriate permissions

the plain text data needs to be encoded to base64

the credit card number should not include spaces

Q81. Complete the following sentence:
For the local state, the workspaces are stored directly in a…

a file called terraform.tfstate

directory called terraform.workspaces.tfstate

directory called terraform.tfstate.d

a file called terraform.tfstate.backup

Q82. True or False?
terraform init cannot automatically download Community providers.

False

True

Q83. An administrator wants to create a new KV mount for individual users to maintain their own secrets but needs a way to simplify the policy so they don’t need to write a new one for each new user? With the requirements listed below, what would such a policy look like?
Requirement: Each user can perform all operations on their allocated key/value secret path

path “user-kv/data/{{identity.entity.name}}/*” {
capabilities = [ “create”, “update”, “read”, “delete”, “list” ]
}

path “user-kv/data/{{identity.entity.id.name}}/*” {
capabilities = [ “create”, “update”, “read”, “delete”, “list” ]
}

path “user-kv/data/{{identity.entity.aliases.<<mount accessor>>.id}}/*” { capabilities = [ “create”, “update”, “read”, “delete”, “list” ]
}

path “user-kv/data/{{user}}/*” {
capabilities = [ “create”, “update”, “read”, “delete”, “list” ]
}

Q84. Which of the following Vault features is available only in the Enterprise version? (select three)

MFA

dynamic credentials

cloud auto unseal

replication

auto unseal with HSM

Q85. Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

FALSE

TRUE

Q86. True or False:
The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with the real-world infrastructure. If the drift is detected between the real-world infrastructure and the last known-state, it will modify the infrastructure to correct the drift.

False

True

Q87. Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered deployment?

Cassandra

MSSQL

PostgreSQL

MySQL

Q88. You’ve logged into the Vault CLI and attempted to enable an auth method, but received this error message. What can be done to resolve the error and configure Vault?
Error enabling userpass auth: Post https://127.0.0.1:8200/v1/sys/auth/userpass: http: server gave HTTP response to HTTPS client

change ‘userpass’ to ‘username and password’

restart the Vault service on this node

set the VAULT_ADDR environment variable to HTTP

ask an admin to grant you permission to enable the userpass auth method

Real HashiCorp VA-002-P Exam Questions Study Guide [Q72-Q88]

Be the first to reply

Leave a Reply Cancel reply