HCVA0-003 Free Practice Test

- (Topic 2)
Which statement most accurately describes how the response wrapping feature functions in Vault?

1. A. Vault takes the response it would have sent to an HTTP client and instead inserts it into the cubbyhole of a single-use token, returning that single-use token instead.
2. B. Vault encrypts the response with a dedicated key and sends it directly to the client, never storing it on the server or using single-use tokens for additional security.
3. C. Vault divides the response into separate parts and stores each part in different tokens, requiring all tokens to be combined before disclosing the secret to the requesting client.
4. D. Vault duplicates the response within a persistent token and allows multiple unwraps, ensuring that any user with the correct token can retrieve the secret repeatedly without time restrictions.

Correct Answer: A

- (Topic 5)
When looking at Vault token details, which key helps you find the paths the token is able to access?

1. A. Meta
2. B. Path
3. C. Policies
4. D. Accessor

Correct Answer: C

- (Topic 4)
Vault is configured with the oidc auth method and you need to log in using the CLI. What command would you use to authenticate so you can make configuration changes to Vault?

1. A. vault login -method=oidc username=bryan
2. B. vault auth oidc
3. C. vault login auth/oidc/users/bryan
4. D. vault login username=bryan

Correct Answer: A

- (Topic 4)
True or False? After rotating a transit encryption key, all data encrypted with the previous version must be rewrapped or re-encrypted with the new key.

1. A. True
2. B. False

Correct Answer: B

- (Topic 2)
You are using Azure Key Vault for the auto-unseal configuration on your cluster. After the Vault service restarts, what command must you run to unseal Vault?

1. A. You don??t need to run a command when using auto-unseal
2. B. vault operator members
3. C. vault operator unseal
4. D. vault operator init

Correct Answer: A