HCVA0-003 Free Practice Test

- (Topic 1)
After encrypting data using the Transit secrets engine, you??ve received the following output. Which of the following is true based on the output displayed below?
Key: ciphertext Value: vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

1. A. The original encryption key has been rotated at least once
2. B. The data is stored in Vault using a KV v2 secrets engine
3. C. This is the second version of the encrypted data
4. D. Similar to the KV secrets engine, the Transit secrets engine was enabled using the transit v2 option

Correct Answer: A

- (Topic 3)
What command can be used to update a Vault policy named web-app-1 using the command line?

1. A. vault policy create web-app-1 web.hcl
2. B. vault policy fmt web.hcl
3. C. vault policy update web-app-1 web.hcl
4. D. vault policy write web-app-1 web.hcl

Correct Answer: D

- (Topic 5)
Where does the Vault Agent store its cache?

1. A. In a file encrypted using the Vault transit secret engine
2. B. In the Vault key/value store
3. C. In an unencrypted file
4. D. In memory

Correct Answer: D

- (Topic 2)
After a client has authenticated to Vault, what security feature is used to make all subsequent calls?

1. A. ldap
2. B. pgp
3. C. path
4. D. key shard
5. E. listener
6. F. token

Correct Answer: F

- (Topic 3)
Which of the following best describes response wrapping?

1. A. The response is Base64 encoded, and the user must decode the response to retrieve the cleartext data
2. B. Rather than provide a direct response, Vault returns a token and an accessor
3. C. Vault responds with an encrypted version of the response, decrypted via transit
4. D. Vault inserts the response into a single-use token??s cubbyhole

Correct Answer: D