Free HashiCorp HCVA0-003 Exam Dumps Questions & Answers

Which is a benefit of Vault's path-based system for policies?

• A.Granular control, which separates configuration functions from access while allowing simple policies and wildcard rules.
• B.Allows Vault to be mounted as a file system and accessed using native system commands like cd and mkdir.
• C.All of these are benefits of Vault's path-based system for policies.
• D.Every path is assigned a unique set of permissions.

The Vault Agent provides which of the following benefits? (Select three)

• A.Authentication to Vault
• B.Token renewal
• C.Automatically creates secrets in the desired storage backend
• D.Client-side caching of responses

Sara uses the Vault CLI for administrative tasks on the production cluster. However, she encounters permission-denied errors when making changes and needs to check which policies are attached to her token to view and adjust permissions. What command can she run on the Vault node to see the attached policies?

• A.vault token capabilities
• B.vault operator diagnose
• C.vault token lookup
• D.vault policy list

Which of these functions can a secrets engine in Vault perform?

• A.Store secrets.
• B.All of the above can be performed by a secrets engine in Vault.
• C.Assign identity.
• D.Encrypt data.

Select the policies below that permit you to create a new entry of environment=prod at the path /secrets/apps
/my_secret (select three).

• A.path " secrets/+/my_secret " { capabilities = [ " create " ] allowed_parameters = { " * " = [] } }
• B.path " secrets/apps/my_secret " { capabilities = [ " create " ] allowed_parameters = { " environment " =
  [] } }
• C.path " secrets/apps/* " { capabilities = [ " create " ] allowed_parameters = { " environment " = [ " dev "
  , " test " , " qa " , " prod " ] } }
• D.path " secrets/apps/my_secret " { capabilities = [ " update " ] }