HashiCorp Certified: Vault Associate Exam - VA-002-P Exam Practice Test

Question 1

Which of the following cloud providers are not supported by Vault secrets engines?

A. Azure

B. Oracle

C. GCP

D. AWS

E. AliCloud

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

True or False:
Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

A. True

B. False

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.

A. True

B. False

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

What happens when a terraform plan is executed?

A. the backend is initialized and the working directory is prepped

B. creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.

C. applies the changes required in the target infrastructure in order to reach the desired configuration

D. reconciles the state Terraform knows about with the real-world infrastructure

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

After enabling the vault to autocomplete feature, you type vault and press the tab button, but nothing happens. Why doesn't vault display the available completions?
1. $ vault -autocomplete-install
2. $ vault

A. you didn't use -force when enabling the feature

B. the SSH session needs to be restarted upon installation

C. your SSH client doesn't support autocompletion

D. you don't have the permissions to use autocomplete

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)

A. terraform.tfstate

B. terraform.tfvars

C. variables.tf

D. output.tf

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?

A. the resource will be created

B. the resource will be updated in place

C. the resource will be destroyed and recreated

D. Terraform can't determine how to proceed due to a problem with the state file

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Beyond encryption and decryption of data, which of the following is not a function of the Vault transit secrets engine?

A. store the encrypted data securely in Vault for retrieval

B. sign and verify data

C. generate hashes and HMACs of data

D. act as a source of random bytes

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

Terraform Cloud is more powerful when you integrate it with your version control system (VCS) provider. Select all the supported VCS providers from the answers below. (select four)

A. Azure DevOps Server

B. GitHub

C. Bitbucket Cloud

D. GitHub Enterprise

E. CVS Version Control

Correct Answer: A,B,C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

When using constraint expressions to signify a version of a provider, which of the following are valid provider versions that satisfy the expression found in the following code snippet: (select two)
1. terraform {
2. required_providers {
3. aws = "~> 1.2.0"
4. }
5. }

A. 1.2.9

B. 1.3.1

C. 1.3.0

D. 1.2.3

Correct Answer: A,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 11

An administrator wants to create a new KV mount for individual users to maintain their own secrets but needs a way to simplify the policy so they don't need to write a new one for each new user? With the requirements listed below, what would such a policy look like?
Requirement: Each user can perform all operations on their allocated key/value secret path

A. path "user-kv/data/{{identity.entity.aliases.<<mount accessor>>.id}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ]
}

B. path "user-kv/data/{{identity.entity.name}}/*" {
capabilities = [ "create", "update", "read", "delete", "list" ]
}

C. path "user-kv/data/{{identity.entity.id.name}}/*" {
capabilities = [ "create", "update", "read", "delete", "list" ]
}

D. path "user-kv/data/{{user}}/*" {
capabilities = [ "create", "update", "read", "delete", "list" ]
}

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 12

What are the benefits of using Infrastructure as Code? (select five)

A. Infrastructure as Code gives the user the ability to recreate an application's infrastructure for disaster recovery scenarios

B. Infrastructure as Code is relatively simple to learn and write, regardless of a user's prior experience with developing code

C. Infrastructure as Code allows a user to turn a manual task into a simple, automated deployment

D. Infrastructure as Code is easily repeatable, allowing the user to reuse code to deploy similar, yet different resources

E. Infrastructure as Code easily replaces development languages such as Go and .Net for application development

F. Infrastructure as Code provides configuration consistency and standardization among deployments

Correct Answer: A,B,C,D,F

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 13

Why might a user opt to include the following snippet in their configuration file?
1. terraform {
2. required_version = ">= 0.12"
3. }

A. Terraform 0.12 introduced substantial changes to the syntax used to write Terraform configuration

B. this ensures that all Terraform providers are above a certain version to match the application being deployed

C. versions before Terraform 0.12 were not approved by HashiCorp to be used in production

D. the user wants to ensure that the application being deployed is a minimum version of 0.12

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 14

When multiple engineers start deploying infrastructure using the same state file, what is a feature of remote state storage that is critical to ensure the state does not become corrupt?

A. encryption

B. workspaces

C. state locking

D. object storage

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 15

In the following code snippet, the block type is identified by which string?
1. resource "aws_instance" "db" {
2. ami = "ami-123456"
3. instance_type = "t2.micro"
4. }

A. instance_type

B. "aws_instance"

C. resource

D. "db"

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

HashiCorp Certified: Vault Associate - VA-002-P Exam Practice Test

Latest Update

Useful Links

Contact Us