Question 1

After logging into the Vault UI, a user complains that they cannot enable Replication. Why would the replication configuration be missing?

Options :

A : replication wasn't configured in the Vault configuration file

B : replication hasn't been enabled

C : Vault is running an open-source version

D : replication configuration isn't available in the UI

Answer: C

Question 2

If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

Options :

A :

path "secret/apps/confidential" {

capabilities = ["deny"]

}

B :

path "secret/*" {

capabilities = ["read", "deny"]

}

C :

path "secret/apps/*" {

capabilities = ["deny"]

}

D :

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

Answer: A

Question 3

Vault supports multiple platforms for both authentication and secrets generation. Based on the command below, is the user configuring Vault for AWS authentication or AWS secrets generation?

$ vault auth enable aws

Options :

A : secrets generation

B : authentication

C : neither, it-s an invalid command

Answer: B

Question 4

Vault has failed to start. You inspect the log and find the error below. What needs to be changed in order to successfully start Vault? "Error parsing config.hcl: At 1:12: illegal char"

Options :

A : the " character cannot be used in the config file

B : fix the syntax error in the Vault configuration file

C : you must use single quotes vs double quotes in the config file

D : line 1 on the config file is blank

Answer: B

Question 5

You've hit the URL for the Vault UI, but you're presented with this screen. Why doesn't Vault present you with a way to log in?

Options :

A : the consul storage backend was not configured correctly

B :

the vault configuration file has an incorrect configuration

C : vault needs to be initialized before it can be used

D : a Vault policy is preventing you from logging in

Answer: C

Confidently Practice Online with Free VA-002-P Exam Cram

Buying Options: