Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. HashiCorp
  5. Vault Associate 002

HashiCorp Vault Associate 002 Exam
HashiCorp Certified: Vault Associate (002) (Page 5 )

Updated On: 9-Feb-2026
Page 5 of 41
PDF with 200 Questions

Which TCP port does Vault use, by default, for its API and UI?

  1. 8600
  2. 8201
  3. 8500
  4. 8301
  5. 8300
  6. 8200

Answer(s): F

Explanation:

By default, Vault uses port 8200 for its API and UI.
8201 is used for the cluster to cluster communication, 8300 is used for Consul Server RPC,
8500 is used for the Consul interface,
8600 is used for Consul DNS,
and 8301 is used for its LAN gossip protocol.



The userpass auth method has the ability to access external services in order to provide authentication to Vault.

  1. FALSE
  2. TRUE

Answer(s): A

Explanation:

The userpass auth method uses a local database that cannot interact with any services outside of the Vault instance.



What is the default method of authentication after first initializing Vault?

  1. GitHub
  2. AppRole
  3. Admin account
  4. Tokens
  5. Userpass
  6. TLS certificates

Answer(s): D

Explanation:

After initializing, Vault provides the root token to the user, this is the only way to log in to Vault to configure additional auth methods.



Which of the following best describes the storage backend?

  1. configures client interaction with a cloud storage service, such as Amazon S3
  2. configures the location for storage of Vault data
  3. selects the type of storage the Vault node runs on, such as SSD or traditional spinning hard drive
  4. Encrypts the hard drives of the server which Vault is running on

Answer(s): B

Explanation:

The storage stanza configures the storage backend, which represents the location for the durable storage of Vault's information.
Storage backend configuration is done through the Vault configuration file using the storage stanza.


Reference:

https://www.vaultproject.io/docs/configuration/storage



Which of the following secrets engine can generate dynamic credentials? (select three)

  1. Azure
  2. database
  3. key/value
  4. Transit
  5. AWS

Answer(s): A,B,E

Explanation:

Vault has many secrets engines that can generate dynamic credentials, including AWS, Azure, and database secrets engines. The key/value secret engine is used to store data, and the transit secret engine is used to encrypt data.






Post your Comments and Discuss HashiCorp Vault Associate 002 exam prep with other Community members:

Join the Vault Associate 002 Discussion