최신 HCVA0-003 무료덤프 - HashiCorp Certified: Vault Associate (003)Exam

문제1

What features are offered by the Vault Agent? (Select three)

A. Auto-auth

B. Secret caching

C. Templating

D. Auditing

정답: A,B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

After decrypting data using the Transit secrets engine, the plaintext output does not match the plaintext credit card number that you encrypted. Which of the following answers provides a solution?
$ vault write transit/decrypt/creditcard ciphertext= " vault:v1:cZNHVx+sxdMEr....... " Key: plaintext Value: Y3JlZGl0LWNhcmQtbnVtYmVyCg==

A. The data is corrupted. Execute the encryption command again using a different data key

B. The user doesn't have permission to decrypt the data, therefore Vault returns false data

C. The resulting plaintext data is base64-encoded. To reveal the original plaintext, use the base64 --decode command

D. Vault is sealed, therefore the data cannot be decrypted. Unseal Vault to properly decrypt the data

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제3

What is the default TTL for tokens in Vault if one is not specified?

A. 60 minutes (1 hour)

B. 15 minutes

C. 768 hours (32 days)

D. 24 hours (1 day)

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Which of the following statements describe the CLI command below?
S vault login -method-1dap username-mitche11h

A. You will be prompted to enter the password

B. Fails because the password is not provided

C. By default the generated token is valid for 24 hours

D. Generates a token which is response wrapped

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

When an auth method is disabled all users authenticated via that method lose access.

A. True

B. False

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

A developer has requested access to manage secrets at the path kv/apps/webapp01. You create the policy below which gives them the proper access:
path " kv/apps/webapp01 " {
capabilities = [ " read " , " create " , " update " , " list " ]
}
However, when the developer logs in to the Vault UI, they see the following screenshot and cannot access the desired secret. Why can't the developer see the secrets they need?

A. The secrets are stored under the cubbyhole secrets engine, so the developer should browse to that secrets engine

B. The policy doesn't permit list access to the paths prior to the secret so the Vault UI doesn't display the mount path

C. The key/value secrets engine isn't available in the Vault UI, therefore the developer should use a different Vault interface instead

D. The Vault UI isn't enabled for the developer, therefore they will only see the default options

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Security requirements demand that no secrets appear in the shell history. Which command does not meet this requirement?

A. vault kv put secret/password value-SSECRET_VALUE

B. generate-password | vault kv put secret/password value

C. vault kv put secret/password [email protected]

D. vault kv put secret/password value-itsasecret

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

You need to write a Vault operator policy and give the users access to perform administrative actions in Vault. What path is used for Vault backend functions?

A. /admin

B. /sys

C. /backend

D. /system

E. /vault

F. /security

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which of the following is NOT a valid way in which a lease can be revoked in Vault?

A. Via the CLI using the vault token command

B. Automatically when the TTL or Max-TTL expires

C. Using the API to call the /v1/sys/leases endpoint

D. Using the user interface (UI)

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which is not a capability that can be used when writing a Vault policy?

A. read

B. modify

C. delete

D. list

E. update

F. create

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제11

You have enabled the Transit secrets engine and want to start encrypting data to store in Azure Blob storage.
What is the next step that needs to be completed before you can encrypt data? (Select two)

A. Enable the Transit secrets engine API

B. Export the encryption key and upload it to the application server

C. Write a policy that permits the application to use the encryption key

D. Create an encryption key for the application to use

정답: C,D

문제12

An organization would like to use a scheduler to track & revoke access granted to a job (by Vault) at completion. What auth-associated Vault object should be tracked to enable this behavior?

A. Token accessor

B. Authentication method

C. Token ID

D. Lease ID

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

HCP Vault Dedicated automatically enables cross-region disaster recovery replication.

A. True

B. False

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제14

Which statement describes the results of this command: $ vault secrets enable transit

A. Fails due to missing -path parameter

B. Enables the transit secrets engine at secret path

C. Enables the transit secrets engine at transit path

D. Fails because the transit secrets engine is enabled by default

E. Requires a root token to execute the command successfully

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제15

Which of the following are true about Vault policies?
Pick the 2 correct responses below.

A. Vault policies support globbing wildcards using the * symbol only at the end of the path.

B. Vault policies support regular expressions.

C. Vault policies support wildcards anywhere in the path.

D. Vault policies are path-based.

E. Vault supports an extensible permission structure that allows new permission types to be added as plugins.

F. A Vault policy must be created for every secret that will be accessed.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

최신 HCVA0-003 무료덤프 - HashiCorp Certified: Vault Associate (003)Exam

우리와 연락하기

유용한 링크

최신 업데이트