Last Vault-Associate-002 practice test reviews Practice Test HashiCorp dumps [Q38-Q59]

QUESTION 38
Which statement describes the results of this command: vault kv list secret/test?

QUESTION 39
What attributes are unique to batch tokens? (Choose three.)

QUESTION 40
Hotspot Question
Where do you define the Namespace to log into using the Vault UI?
To answer this question
Use your mouse to click on the screenshot in the location described above. An arrow indicator will mark where you have clicked. Click the “Answer” button once you have positioned the arrow to answer the question. You may need to scroll down to see the entire screenshot.

QUESTION 41
What is a secret in the context of Vault?

QUESTION 42
To create a non-root token with time-to-live (TTL) set to 30 minutes but with no max TTL which flag would you use?

QUESTION 43
Which statements correctly describe the command below. Choose TWO correct answers.
vault write transit/decrypt/password
ciphertext=vault:v1:8SDd3WHDOjf7mq69CyCqYjBXAiQQAVZRkFM13ok481zoCmHnSeD X9vyf7w==

QUESTION 44
You are using Vault’s Transit secrets engine to encrypt your data. You want to reduce the amount of content encrypted with a single key in case the key gets compromised. How would you do this?

QUESTION 45
What can be used to limit the scope of a credential breach?

QUESTION 46
Unsealing a single Vault server in a cluster unseals all Vault servers in that cluster.

QUESTION 47
What does the following policy do?

QUESTION 48
You have been tasked with writing a policy that will allow read permissions for all secrets at path secret/bar. The users that are assigned this policy should also be able to list the secrets. What should this policy look like?

QUESTION 49
Which of the following describes the Vault’s auth method component?

QUESTION 50
Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

QUESTION 51
Which of the following are replication methods available in Vault Enterprise? (Choose two.)

QUESTION 52
The Vault encryption key is stored in Vault’s backend storage.

QUESTION 53
Which of the following storage backends supports high availability?

QUESTION 54
An authentication method should be selected for a use case based on:

QUESTION 55
You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named “sally” with password “h0wN0wB4r0wnC0w”? This new user will need the power-users policy.

QUESTION 56
What methods of authentication does Vault support? (Choose four.)

QUESTION 57
Which statement describes the results of this command: $ vault secrets enable transit?

QUESTION 58
Which command will generate a new transit key?

QUESTION 59
Which of the following vaultleaseoperations uses a lease_idas an argument? (Choose two.)