Free HashiCorp Vault-Associate-002 Exam Dumps Questions & Answers

Which statement describes the results of this command: $ vault secrets enable - version=2 kv(Choose two.)

• A.Enables K/V v1 secrets engine
• B.Enables the secrets engine at path kv/
• C.The -versionis an invalid flag
• D.Enables K/V v2 secrets engine
• E.Enables the secrets engine at path kv2/

Which is not true of Vault tokens?

• A.Vault tokens are required for every Vault call
• B.Vault tokens are the core method for authentication in Vault
• C.Vault tokens are generated by every authentication method login
• D.Vault tokens map to information including polices the token holder has, TTL and max usage, metadata, creation and last renewal time, and more

When using Integrated Storage, which of the following should you do to recover from possible data loss?

• A.Use snapshot
• B.Enable audit device
• C.Use local storage
• D.Use external storage

Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

• A.Cloud KMS
• B.Transit
• C.PKI
• D.Key/Value secrets engine version 2, with TTL defined

The 'alpha' secrets are stored in the team-based paths using this convention:
secret/<team_name>/alpha. For example, secret/team01/alphaand
/secrets/team02/alpha.
Which Vault policy would not allow reading paths with the word "beta" in them, such as secrets/team01/beta?

• A.
• B.
• C.
• D.None of the above