VA-002-P Exam Questions Dumps, Selling HashiCorp Products [Q47-Q64] – IT Certification Exam Questions & Answers

Rate this post

VA-002-P Exam Questions Dumps, Selling HashiCorp Products

VA-002-P Cert Guide PDF 100% Cover Real Exam Questions

QUESTION 47
Which of the following best describes the storage backend?

configures client interaction with a cloud storage service, such as Amazon S3

configures the location for storage of Vault data

selects the type of storage the Vault node runs on, such as SSD or traditional spinning hard drive

Encrypts the hard drives of the server which Vault is running on

QUESTION 48
In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.

True

False

QUESTION 49
When Terraform needs to be installed in a location where it does not have internet access to download the installer and upgrades, the installation is generally known as to be __________.

a private install

disconnected

non-traditional

air-gapped

QUESTION 50
Which of the following Vault features is available only in the Enterprise version? (select three)

MFA

dynamic credentials

cloud auto unseal

replication

auto unseal with HSM

QUESTION 51
The Vault Agent provides which of the following benefits? (select three)

client-side caching of responses

automatically creates secrets in the desired storage backend

authentication to Vault

token renewal

QUESTION 52
You are deploying Vault in a local data center, but want to be sure you have a secondary cluster in the event the primary cluster goes offline. In the secondary data center, you have applications that are running, as they are architected to run active/active. Which type of replication would be best in this scenario?

disaster recovery replication

single-node replication

performance replication

end-to-end replication

QUESTION 53
Which of the following secrets engine can generate dynamic credentials? (select three)

Azure

database

key/value

Transit

AWS

QUESTION 54
What are some of the problems of how infrastructure was traditionally managed before Infrastructure as Code? (select three)

Requests for infrastructure or hardware required a ticket, increasing the time required to deploy applications

Traditional deployment methods are not able to meet the demands of the modern business where resources tend to live days to weeks, rather than months to years

Traditionally managed infrastructure can’t keep up with cyclic or elastic applications

Pointing and clicking in a management console is a scalable approach and reduces human error as businesses are moving to a multi-cloud deployment model

QUESTION 55
True or False:
Multiple providers can be declared within a single Terraform configuration file.

False

True

QUESTION 56
True or False:
Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

True

False

QUESTION 57
Which two interfaces automatically assume the token for subsequent requests after successfully authenticating? (select two)

API

CLI

Consul

QUESTION 58
What happens to child tokens when a parent token is revoked?

the child tokens are renewed

the child tokens are converted to parent tokens

the child tokens create their own child tokens to be used

the child tokens are revoked

QUESTION 59
A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?

add read permissions to the path secrets/apps

modify the policy to allow the create permission

remove the deny policy blocking access to the secrets/apps/app1 path

add LIST to the policy so the user can browse the paths leading up to the key/value’s path

QUESTION 60
You’ve decided to use AWS KMS to automatically unseal Vault on private EC2 instances. After deploying your Vault cluster, and running vault operator init, Vault responds with an error and cannot be unsealed.
You’ve determined that the subnet you’ve deployed Vault into doesn’t have internet access. What can you do to enable Vault to communicate with AWS KMS in the most secure way?

ask the networking team to provide Vault with inbound access from the internet

deploy Vault in a public subnet and provide the Vault nodes with public IP addresses

add a VPC endpoint

change the permissions on the Internet Gateway to allow the Vault nodes to communicate over the Internet

QUESTION 61
True or False:
Similar to how Vault works with databases and cloud providers, the Active Directory secrets engine dynamically generates the account and password for the requesting Vault client.

False

True

QUESTION 62
Which is not a capability that can be used when writing a Vault policy?

read

list

delete

create

modify

update

QUESTION 63
Which of the following terraform subcommands could be used to remove the lock on the state for the current configuration?

unlock

Removing the lock on a state file is not possible