Free VA-002-P Exam Braindumps (page: 1)

Page 1 of 51

Which auth method is ideal for machine to machine authentication?

  1. GitHub
  2. UserPass
  3. AppRole
  4. Okta

Answer(s): C


The ideal method for a machine to machine authentication is AppRole although it's not the only method. The other options are frequently reserved for human access.


When Vault is sealed, which are the only two options available to a Vault administrator? (select two)

  1. rotate the encryption key
  2. unseal Vault
  3. view the status of Vault
  4. configure policies
  5. author security policies
  6. view data stored in the key/value store

Answer(s): B,C


When Vault is sealed, the only two options available are, viewing the vault status and unsealing Vault. All the other actions performed after the Vault is unsealed and the user is authenticated.

After creating a dynamic credential on a database, the DBA accidentally deletes the credentials on the database itself. When attempting to remove the lease, Vault returns an error stating that the
credential cannot be found. What command can be run to coerce Vault to remove the secret?

  1. vault lease -renew
  2. vault lease revoke -force -prefix <lease_path>
  3. vault revoke -apply
  4. vault lease revoke -enforce

Answer(s): B


The -force flag is meant for recovery when the secret in the target secrets engine was manually deleted.

What type of token does not have a TTL (time to live)?

  1. default tokens
  2. parent tokens
  3. user tokens
  4. root tokens
  5. expired tokens
  6. child tokens

Answer(s): D


Non-root tokens are associated with a TTL, which determines how long a token is valid. Root tokens are not associated with a TTL, and therefore, do not expire. Root tokens are tokens that have the root policy attached to them. They are the only type of token within Vault that are not associated with a TTL, and therefore, do not expire.

Page 1 of 51

Post your Comments and Discuss HashiCorp VA-002-P exam with other Community members:

BrunoVorgil 10/11/2023 3:20:54 AM
Note that the PDF has the Vault Questions (first 100), and then 100 Teraform (?) question. The EXM *reverses* this order - so you need to jump to question 100 to get to a Vault Question. We'll see tomorrow if it was worth studying...