HCVA0-003 Free Practice Test

- (Topic 5)
Vault supports which type of configuration for source limited token?

1. A. Cloud-bound tokens
2. B. Domain-bound tokens
3. C. CIDR-bound tokens
4. D. Certificate-bound tokens

Correct Answer: C

- (Topic 1)
How long does the Transit secrets engine store the resulting ciphertext by default?

1. A. 24 hours
2. B. 30 days
3. C. 32 days
4. D. Transit does not store data

Correct Answer: D

- (Topic 4)
A developer has requested access to manage secrets at the path kv/apps/webapp01. You create the policy below which gives them the proper access:
path "kv/apps/webapp01" {
capabilities = ["read", "create", "update", "list"]
}
However, when the developer logs in to the Vault UI, they see the following screenshot and cannot access the desired secret. Why can??t the developer see the secrets they need?

1. A. The Vault UI isn??t enabled for the developer, therefore they will only see the default options
2. B. The key/value secrets engine isn??t available in the Vault UI, therefore the developer should use a different Vault interface instead
3. C. The policy doesn??t permit list access to the paths prior to the secret so the Vault UI doesn??t display the mount path
4. D. The secrets are stored under the cubbyhole secrets engine, so the developer should browse to that secrets engine

Correct Answer: C

- (Topic 4)
You have logged into the Vault UI and see this screen. What Vault component is being enabled in the screenshot below?

1. A. Storage Backends
2. B. Secrets Engine
3. C. Auth Methods
4. D. Audit Devices

Correct Answer: B

- (Topic 5)
Which of the following describes the Vault's auth method component?

1. A. It verifies a client against an internal or external system, and generates a token with the appropriate policies attached
2. B. It verifies a client against an internal or external system, and generates a token with root policy
3. C. It is responsible for durable storage of client tokens
4. D. It dynamically generates a unique set of secrets with appropriate permissions attached

Correct Answer: A