Free VA-002-P Exam Braindumps (page: 5)

Page 5 of 51

The userpass auth method has the ability to access external services in order to provide authentication to Vault.

  1. FALSE
  2. TRUE

Answer(s): A

Explanation:

The userpass auth method uses a local database that cannot interact with any services outside of the Vault instance.



What is the default method of authentication after first initializing Vault?

  1. GitHub
  2. AppRole
  3. Admin account
  4. Tokens
  5. Userpass
  6. TLS certificates

Answer(s): D

Explanation:

After initializing, Vault provides the root token to the user, this is the only way to log in to Vault to configure additional auth methods.



Which of the following best describes the storage backend?

  1. configures client interaction with a cloud storage service, such as Amazon S3
  2. configures the location for storage of Vault data
  3. selects the type of storage the Vault node runs on, such as SSD or traditional spinning hard drive
  4. Encrypts the hard drives of the server which Vault is running on

Answer(s): B

Explanation:

The storage stanza configures the storage backend, which represents the location for the durable storage of Vault's information.
Storage backend configuration is done through the Vault configuration file using the storage stanza.


Reference:

https://www.vaultproject.io/docs/configuration/storage



Which of the following secrets engine can generate dynamic credentials? (select three)

  1. Azure
  2. database
  3. key/value
  4. Transit
  5. AWS

Answer(s): A,B,E

Explanation:

Vault has many secrets engines that can generate dynamic credentials, including AWS, Azure, and database secrets engines. The key/value secret engine is used to store data, and the transit secret engine is used to encrypt data.



Page 5 of 51



Post your Comments and Discuss HashiCorp VA-002-P exam with other Community members:

Bruno commented on October 10, 2023
PDF is Vault, EXM is Teraform.
UNITED STATES
upvote