HCVA0-003 Free Practice Test

- (Topic 5)
The vault lease renew command increments the lease time from:

1. A. The current time
2. B. The end of the lease

Correct Answer: A

- (Topic 5)
Your DevOps team would like to provision VMs in GCP via a CICD pipeline. They would like to integrate Vault to protect the credentials used by the tool. Which secrets engine would you recommend?

1. A. Google Cloud Secrets Engine
2. B. Identity secrets engine
3. C. Key/Value secrets engine version 2
4. D. SSH secrets engine

Correct Answer: A

- (Topic 4)
You are working on a new project and need to retrieve a secret from Vault. You log into the Vault UI and browse to the path where the secret is stored. Based on the screenshot below, what is true about the secrets stored in this path? (Select four)

1. A. The secrets are stored in a KV v1 secrets engine
2. B. The user does not have permission to delete the secret
3. C. The secrets are stored in a KV v2 secrets engine
4. D. The secrets engine is mounted at the path developers/
5. E. There are four previous versions of the secret
6. F. The user has additional permissions on the path beyond just list and read

Correct Answer: CDEF

- (Topic 5)
When unsealing Vault, each Shamir unseal key should be entered:

1. A. Sequentially from one system that all of the administrators are in front of
2. B. By different administrators each connecting from different computers
3. C. While encrypted with each administrators PGP key
4. D. At the command line in one single command

Correct Answer: B

- (Topic 5)
Examine the command below.Output has been trimmed.

Which of the following statements describe the command and its output?

1. A. Missing a default token policy
2. B. Generated token's TTL is 60 hours
3. C. Generated token is an orphan token which can be renewed indefinitely
4. D. Configures the AppRole auth method with user specified role ID and secret ID

Correct Answer: BC