Question 1

Hanna is working with Vault and has been assigned a namespace called integration, where she stores all her secrets. Hanna configured her application to use the following API request, but the request is failing. What changes below will help Hanna correctly retrieve the secret? (Select two) $ curl \ --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" \ --request GET \ https://vault.example.com:8200/v1/secret/data/my-secret

Options :

A : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET\integration https://vault.example.com:8200/v1/secret/data/my-secret

B : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET --namespace "integration" https://vault.example.com:8200/v1/secret/data/my-secret

C : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET https://vault.example.com:8200/v1/integration/secret/data/my-secret

D : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --header "X VaultNamespace:integration" --request GET https://vault.example.com:8200/v1/secret/data/my-secret

Answer: C,D

Question 2

All Vault instances, or clusters, include two built-in policies that are created automatically. Choose the two policies below and the correct information regarding each policy. (Select two)

Options :

A : The root policy is created automatically. This policy provides superuser privileges and cannot be deleted

B : The admin policy is created automatically. It provides administrative permissions but can be deleted if needed

C : The default policy is created automatically. This policy can be modified but not deleted

D : The default policy is created automatically. This policy cannot be modified but it can be deleted

Answer: A,C

Question 3

Where does the Vault Agent store its cache?

Options :

A : In a file encrypted using the Vault transit secret engine

B : In the Vault key/value store

C : In an unencrypted file

D : In memory

Answer: D

Question 4

You have a 2GB Base64 binary large object (blob) that needs to be encrypted.How will the Transit secrets engine manage the encryption lifecycle for a large blob?

Options :

A : A data key encrypts the blob locally, and the same key decrypts the blob locally.

B : Vault will store the blob permanently. Be sure to run Vault on a compute-optimized machine.

C : The Transit engine is not a good solution for binaries of this size.

D : To process such a large blob, Vault will temporarily store it in the storage backend.

Answer: A

Question 5

Which of the following features in Vault will replicate service tokens between clusters

Options :

A : Disaster Recovery Replication

B : Performance Replication

C : Vault Agent

D : Integrated Storage

Answer: A

Confidently Practice Online with Free HCVA0-003 Exam Cram

Buying Options: