Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
All Vendors
  2. Home
  3. Exams
  4. HashiCorp
  5. HCVA0-003

Free HashiCorp HCVA0-003 Exam Questions (page: 12)

Page 12 of 73
PDF with 285 Questions

True or False? Once you create a KV v1 secrets engine and place data in it, there is no way to modify the mount to include the features of a KV v2 secrets engine.

  1. True
  2. False

Answer(s): B

Explanation:

Comprehensive and Detailed in Depth
A: Incorrect; KV v1 can be upgraded to v2.
B: Correct; vault kv enable-versioning upgrades it.
Overall Explanation from Vault Docs:
"kv enable-versioning turns on versioning for an existing KV v1 engine at its path."


Reference:

https://developer.hashicorp.com/vault/docs/secrets/kv/kv-v2#upgrading-from-version-1



Given the following screenshot, how many secrets engines have been enabled by a Vault user?

  1. 2
  2. 3
  3. 4
  4. 5

Answer(s): B

Explanation:

Comprehensive and Detailed in Depth cubbyhole is default; kv and transit are user-enabled. Total: 3.
Overall Explanation from Vault Docs:
"cubbyhole is enabled by default... User-enabled engines add to this."


Reference:

https://developer.hashicorp.com/vault/docs/secrets/cubbyhole



When configuring Vault replication and monitoring its status, you keep seeing something called 'WALs'.
What are WALs?

  1. Warning of allocated logs
  2. Write along logging
  3. Write-ahead logs
  4. Wake after LAN

Answer(s): C

Explanation:

Comprehensive and Detailed in Depth
C: WALs (Write-Ahead Logs) ensure data consistency in replication. Correct.
Overall Explanation from Vault Docs:
"Replication uses Write-Ahead Logs (WALs) for log shipping between clusters..."


Reference:

https://developer.hashicorp.com/vault/docs/internals/replication



A Jenkins server is using the following token to access Vault. Based on the lookup shown below, what type of token is this?
$ vault token lookup hvs.FGP1A77Hxa1Sp6Pkp1yURcZB

Key Value
--- -----
accessor RnH8jtgrxBrYanizlyJ7Y8R
creation_time 1604604512
creation_ttl 24h display_name token entity_id n/a expire_time 2025-11-06T14:28:32.8891566-05:00
explicit_max_ttl 0s id hvs.FGP1A77Hxa1Sp6KRau5eNB
issue_time 2025-11-06T14:28:32.8891566-05:00
meta <nil>
num_uses 0
orphan false path auth/token/create period 24h policies [admin default]
renewable true ttl 23h59m50s type service

  1. Periodic token
  2. Batch token
  3. Orphaned token
  4. Secondary token

Answer(s): A

Explanation:

Comprehensive and Detailed in Depth

A: period indicates a renewable periodic token. Correct.
Overall Explanation from Vault Docs:
"A periodic token has a period... renewable without a max TTL."


Reference:

https://developer.hashicorp.com/vault/docs/concepts/tokens#token-time-to-live- periodic-tokens-and-explicit-max-ttls



Viewing page 12 of 73
Viewing questions 45 - 48 out of 285 questions



Post your Comments and Discuss HashiCorp HCVA0-003 exam prep with other Community members:

HCVA0-003 Exam Discussions & Posts