Question 1

Vault supports multiple platforms for both authentication and secrets generation. Based on the command below, is the user configuring Vault for AWS authentication or AWS secrets generation?

$ vault auth enable aws

Options :

A : secrets generation

B : authentication

C : neither, it-s an invalid command

Answer: B

Question 2

Frapps, Inc. is a new coffee startup in Boston that specializes in frozen caffeinated drinks. Their new web app for customer loyalty uses Vault to store all sensitive information. During the Vault design, they chose to use Integrated Storage due to all of its benefits.

Select the benefits the organization would see by using Integrated Storage over other storage backends (select four)

Options :

A : simplified troubleshooting since Integrated Storage is a built-in solution

B : eliminates network communication between hosts, requiring no open ports between hosts

C : reduces operational overhead since all configuration is within Vault itself

D : immediate access to storage since the data is stored locally on disk

E : uses the SERF gossip protocol to enable communication between cluster nodes

F : eliminates the requirement to deploy and manage a separate platform for storing encrypted data

Answer: A,C,D

Question 3

There are a few ways in Vault that can be used to obtain a root token. Select the valid methods from the answers below. (select three)

Options :

A :

using a batch DR operation token to create a new root token in the event of an emergency

B : running the command vault token create when using a valid root token

C : generating a root token using a quorum of recovery keys when using Vault auto unseal

D : initializing Vault when first creating the cluster by using vault operator init

Answer: B,C,D

Question 4

If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

Options :

A :

path "secret/apps/confidential" {

capabilities = ["deny"]

}

B :

path "secret/*" {

capabilities = ["read", "deny"]

}

C :

path "secret/apps/*" {

capabilities = ["deny"]

}

D :

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

Answer: A

Question 5

The userpass auth method has the ability to access external services in order to provide authentication to Vault

Options :

A : FALSE

B : TRUE

Answer: A

Confidently Practice Online with Free VA-002-P Exam Cram

Buying Options: