Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. HashiCorp
  5. VA-002-P

Free HashiCorp VA-002-P Exam Braindumps (page: 20)

90.0% Passing Rate DOWNLOAD PDF EXAM
200 Questions & Answers
Page 5 of 51

Which of the following settings are configured using the configuration file? (select three)

  1. Cluster Name
  2. Replication
  3. Seal Type
  4. Auth Methods
  5. Namespaces
  6. Storage Backend
  7. Audit Devices

Answer(s): A,C,F

Explanation:

Seal types, Storage backends, and cluster names are just a few of the configurations done via the configuration file. The others are configured within Vault itself.



Vault's User Interface (UI) needs to be enabled in the command line before it can be used.

  1. FALSE
  2. TRUE

Answer(s): A

Explanation:

The UI is enabled in the Vault configuration file, not in the CLI.



Which of the following unseal options can automatically unseal Vault upon the start of the Vault service? (select four)

  1. Transit
  2. HSM
  3. AWS KMS
  4. Key Shards
  5. Azure KMS

Answer(s): A,B,C,E

Explanation:

When a Vault server is started, it starts in a sealed state and it does not know how to decrypt data. Before any operation can be performed on the Vault, it must be unsealed. Unsealing is the process of constructing the master key necessary to decrypt the data encryption key. Below are links covering details of each option:- https://www.vaultproject.io/docs/concepts/seal AWS KMS
https://learn.hashicorp.com/vault/operations/ops-autounseal-aws-kms Auto-unseal using Transit Secrets Engine
https://learn.hashicorp.com/vault/operations/autounseal-transit
Auto-unseal using Azure Key Vault
https://learn.hashicorp.com/vault/day-one/autounseal-azure-keyvault Auto-unseal using HSM
https://learn.hashicorp.com/vault/operations/ops-seal-wrap Key shards don't support auto unseal instead key shards require the user to provide unseal keys to reconstruct the master key
https://www.vaultproject.io/docs/concepts/seal



Which TCP port does Vault use, by default, for its API and UI?

  1. 8600
  2. 8201
  3. 8500
  4. 8301
  5. 8300
  6. 8200

Answer(s): F

Explanation:

By default, Vault uses port 8200 for its API and UI.
8201 is used for the cluster to cluster communication, 8300 is used for Consul Server RPC,
8500 is used for the Consul interface,
8600 is used for Consul DNS,
and 8301 is used for its LAN gossip protocol.






Post your Comments and Discuss HashiCorp VA-002-P exam prep with other Community members:

VA-002-P Exam Discussions & Posts