HCVA0-003 Free Practice Test

- (Topic 4)
Your organization uses a CI/CD pipeline to deploy its applications on Azure. During testing, you generate new credentials to validate Vault can create new credentials. The result of this command is below:
text CollapseWrapCopy
$ vault read azure/creds/bryan-krausen Key Value
--- -----
lease_id azure/creds/bryan-krausen/9eed0373-ca92-99b6-b914-779b7bb0e1d9 lease_duration 60m
lease_renewable true
client_id 532bf678-ee4e-6be1-116b-4e4221e445dd client_secret be60395b-4e6b-2b7e-a4b3-c449a5c00973
What commands can be used to revoke this secret after you have finished testing? (Select three)

1. A. vault lease revoke azure/
2. B. vault lease revoke -prefix azure/
3. C. vault lease revoke azure/creds/bryan-krausen/9eed0373-ca92-99b6-b914- 779b7bb0e1d9
4. D. vault lease revoke azure/creds/bryan-krausen
5. E. vault lease revoke -prefix azure/creds/bryan-krausen

Correct Answer: BCE

- (Topic 4)
Frapps, Inc. is a coffee startup specializing in frozen caffeinated beverages. Their new customer loyalty web app uses Vault to store sensitive information, choosing Integrated Storage for its benefits. Select the benefits the organization would see by using Integrated Storage over other storage backends (Select four)

1. A. Eliminates network communication between hosts, requiring no open ports between hosts
2. B. Uses the SERF gossip protocol to enable communication between cluster nodes
3. C. Eliminates the requirement to deploy and manage a separate platform for storing encrypted data
4. D. Simplified troubleshooting since Integrated Storage is a built-in solution
5. E. Reduces operational overhead since all configuration is within Vault itself
6. F. Immediate access to storage since the data is stored locally on disk

Correct Answer: CDEF

- (Topic 1)
Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?

1. A. hvs.y4fUERqCtUV0xsQjWLJar5qX - TTL: 4 hours
2. B. hvs.FNiIFU14RUxxUYAl4ErLfPVR - TTL: 6 hours
3. C. hvs.Jw9LMpu7oCQgxiKbjfyzyg75 - TTL: 4 hours (child of B)
4. D. hvs.3IrlhEvcerEGbae11YQf9FvI - TTL: 3 hours
5. E. hvs.hOpweMVFvqfvoVnNgvZq8jLS - TTL: 5 hours (child of D)

Correct Answer: D

- (Topic 4)
You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?

1. A. VAULT_REDIRECT_ADDR
2. B. VAULT_CLUSTER_ADDR
3. C. VAULT_ADDR
4. D. VAULT_CAPATH

Correct Answer: C

- (Topic 3)
Kyle enabled the database secrets engine for dynamic credentials. Amy, the senior DBA, accidentally deleted the database users created by Vault, disrupting client applications.
How can Kyle manually remove the leases in Vault?

1. A. No action is required since the leases will eventually expire and be revoked
2. B. Obtain the individual lease IDs from the application logs and remove them using the vault lease revoke command
3. C. Use the command vault lease revoke -force flag to delete the leases
4. D. Revoke all of the leases associated with the entire database secrets engine to be sure they are all removed

Correct Answer: C