HCVA0-003 Free Practice Test

- (Topic 4)
Your organization audited an essential application and found it isn??t securely storing data. For added security, auditors recommended encrypting all data before storing it in a backend database, and the application server should not store encryption keys locally. Which secrets engine meets these requirements?

1. A. PKI secrets engine
2. B. SSH secrets engine
3. C. Transit secrets engine
4. D. Cubbyhole secrets engine

Correct Answer: C

- (Topic 1)
According to the screenshot below, what auth method did this client use to log in to Vault? (Screenshot shows a lease path: auth/userpass/login/student01)

1. A. Userpass
2. B. Auth
3. C. Root token
4. D. Child token

Correct Answer: A

- (Topic 5)
You are performing a high number of authentications in a short amount of time. You're experiencing slow throughput for token generation. How would you solve this problem?

1. A. Increase the time-to-live on service tokens
2. B. Implement batch tokens
3. C. Establish a rate limit quota
4. D. Reduce the number of policies attached to the tokens

Correct Answer: B

- (Topic 4)
You have successfully authenticated using the Kubernetes auth method, and Vault has provided a token. What HTTP header can be used to specify your token when you request dynamic credentials? (Select two)

1. A. X-Vault-Token: <token>
2. B. Token:
3. C. Authentication:
4. D. Authorization: Bearer

Correct Answer: AD

- (Topic 5)
You have a 2GB Base64 binary large object (blob) that needs to be encrypted. Which of the following best describes the transit secrets engine?

1. A. A data key encrypts the blob locally, and the same key decrypts the blob locally.
2. B. To process such a large blo
3. C. Vault will temporarily store it in the storage backend.
4. D. Vault will store the blob permanentl
5. E. Be sure to run Vault on a compute optimized machine
6. F. The transit engine is not a good solution for binaries of this size.

Correct Answer: D