Question 1

Scented Candle Company currently uses PingFederate for applications to authenticate to Active Directory using SAML2.0. The organization wants to reduce the number of direct connectivity to its AD servers and force everything through PingFederate.

What auth method should Scented Candle Company enable and configure for Vault?

Options :

A : UserPass

B : OIDC/JWT

C : LDAP

D : Okta

Answer: B

Question 2

Complete the sentence: Unsealing Vault is the process of ___________________________.

Options :

A : creating the unseal or recovery keys

B : reconstructing the master key

C : exporting the encryption key

D : decrypting the Vault data

Answer: B

Question 3

If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

Options :

A :

path "secret/apps/confidential" {

capabilities = ["deny"]

}

B :

path "secret/*" {

capabilities = ["read", "deny"]

}

C :

path "secret/apps/*" {

capabilities = ["deny"]

}

D :

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

Answer: A

Question 4

What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)

Options :

A : access to all of the secret engines

B : ability to enable auth methods

C : persistent storage

D : faster deployment

E : encryption via TLS

Answer: A,C

Question 5

Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?

├───s.y4fUERqCtUV0xsQjWLJar5qX - TTL: 4 hours

├───s.FNiIFU14RUxxUYAl4ErLfPVR - TTL: 6 hours

├───s.Jw9LMpu7oCQgxiKbjfyzyg75 - TTL: 4 hours

├───s.3IrlhEvcerEGbae11YQf9FvI - TTL: 3 hours

├───s.hOpweMVFvqfvoVnNgvZq8jLS - TTL: 5 hours

Options :

A :

only s.Jw9LMpu7oCQgxiKbjfyzyg75

B :

only s.3IrlhEvcerEGbae11YQf9FvI

C : both s.3IrlhEvcerEGbae11YQf9FvI and s.hOpweMVFvqfvoVnNgvZq8jLS

D : both s.3IrlhEvcerEGbae11YQf9FvI and s.Jw9LMpu7oCQgxiKbjfyzyg75

Answer: C

Confidently Practice Online with Free VA-002-P Exam Cram

Buying Options: