Which of the following cloud providers are not supported by Vault secrets engines?
Answer(s): A
Vault supports AWS, Azure, Google Cloud, and Alibaba Cloud out of the box for secrets engines
Vault policies are deny by default
Everything in Vault is path-based including policies. Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault. Policies are deny by default, so an empty policy grants no permission in the system.
In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.
Answer(s): B
Consul nodes in the same cluster should not be provisioned across multiple data centers or cloud regions due to the low-latency requirements.
Which two interfaces automatically assume the token for subsequent requests after successfully authenticating? (select two)
Answer(s): A,C
After authenticating, the UI and CLI automatically assume the token for all subsequent requests. The API, however, requires the user to extract the token from the server response after authenticating in order to send with subsequent requests.
Post your Comments and Discuss HashiCorp VA-002-P exam with other Community members:
Bruno commented on October 10, 2023 PDF is Vault, EXM is Teraform. UNITED STATES upvote
Our website is free, but we have to fight against bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the VA-002-P content, but please register or login to continue.