HCVA0-003試験無料問題集（328題）「HashiCorp Certified: Vault Associate (003)Exam 認定」

出題：1

Which of the following statements are true regarding Vault seal and unseal (select three)?

A. When using Vault Auto Unseal feature, Vault returns unseal keys to the user when it is initialized

B. By default, Vault uses the Shamir Sharing algorithm to create unseal keys during the initialization process

C. Vault supports high availability for the Auto Unseal feature, allowing you to point to multiple keys

D. Vault can use a third-party KMS solution to automatically unseal during a service restart

正解：B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Tom needs to set the proper environment variable so he doesn't need to first authenticate to Vault to retrieve dynamically generated credentials for a database server. What environment variable does Tom need to set first before running commands?

A. VAULT_TOKEN

B. VAULT_CLIENT_KEY

C. VAULT_NAMESPACE

D. VAULT_CAPATH

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What environment variable overrides the CLI ' s default Vault server address?

A. VAULT_HTTP_ADORESS

B. VAULT_ADDRESS

C. VAULT_ADDR

D. VAULT _HTTPS_ ADDRESS

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

What is the default value of the VAULT_ADDR environment variable?

A. https://vault.example.com:8200

B. http://127.0.0.1:8200

C. http://vault.example.com:8200

D. https://127.0.0.1:8200

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You have enabled the Transit secrets engine on your Vault cluster to provide an " encryption as a service " service as your team develops new applications. What is a prime use case for the Transit secrets engine?

A. Creating X.509 certificates for a new fleet of containers

B. Storing the encrypted data in Vault for easy retrieval

C. Encrypting data before being written to an Amazon S3 bucket

D. Generating dynamic SSH credentials for access to local systems

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Jarrad is an AWS engineer and has provisioned a new EC2 instance running MySQL since his application requires a specific MySQL version. He wants to integrate Vault into his workflow but is new to Vault. What secrets engine should Jarrad use to integrate this new database running in AWS?

A. database

B. azure

C. kv

D. aws

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You need to write a Vault operator policy and give the users access to perform administrative actions in Vault. What path is used for Vault backend functions?

A. /sys

B. /admin

C. /security

D. /system

E. /vault

F. /backend

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Vault operators can create two types of groups in Vault. What are the two types?

A. Internal groups

B. Policy groups

C. Security groups

D. External groups

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

The Vault CLI can output to formats such as JSON, YAML, and Table.

A. True

B. False

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You have TBs of data encrypted by Vault stored in a database and are worried about Vault becoming unavailable and not being able to decrypt the data. Is it possible to export the encryption key to store it somewhere else in the event Vault becomes unavailable?

A. No, you cannot export the encryption key from Vault

B. Yes, as long as the key was configured to be exportable when it was created

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

What command can be used to update a Vault policy named web-app-1 using the command line?

A. vault policy write web-app-1 web.hcl

B. vault policy create web-app-1 web.hcl

C. vault policy fmt web.hcl

D. vault policy update web-app-1 web.hcl

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

HCVA0-003試験無料問題集「HashiCorp Certified: Vault Associate (003)Exam 認定」