HCVA0-003 Free Practice Test

- (Topic 3)
You need a simple and self-contained HashiCorp Vault cluster deployment with minimal dependencies. Which storage backend is best suited for this use case, providing all configuration within Vault and avoiding external services?

1. A. Local File Storage Backend
2. B. Integrated Storage (raft) Backend
3. C. Consul Backend
4. D. In-Memory Backend

Correct Answer: B

- (Topic 3)
Which of the following actions can be performed if you only had access to a token??s accessor? (Select four)

1. A. Look up a token??s properties
2. B. Renew the token
3. C. Retrieve the actual token ID
4. D. Revoke the token
5. E. Look up a token??s capabilities on a path

Correct Answer: ABDE

- (Topic 2)
Which of the following auth methods is the best choice for human interaction with Vault (as opposed to machine/system authentication)?

1. A. Kubernetes
2. B. AppRole
3. C. TLS
4. D. OIDC

Correct Answer: D

- (Topic 3)
What is the default TTL for tokens in Vault if one is not specified?

1. A. 24 hours (1 day)
2. B. 15 minutes
3. C. 768 hours (32 days)
4. D. 60 minutes (1 hour)

Correct Answer: C

- (Topic 1)
You??ve set up multiple Vault clusters, one on-premises intended to be the primary cluster, and the second cluster in AWS, which was deployed for performance replication. After enabling replication, developers complain that all the data they??ve stored in the AWS Vault cluster is missing. What happened?

1. A. There is a certificate mismatch after replication was enabled since Vault replication generates its own TLS certificates to ensure nodes are trusted entities
2. B. All of the data on the secondary cluster was deleted after replication was enabled
3. C. The data was automatically copied to the primary cluster after replication was enabled since all writes are always forwarded to the primary cluster
4. D. The data was moved to a recovery path after replication was enable
5. E. Use the vault secrets move command to move the data back to its intended location

Correct Answer: B