Question 1

Which of the following features in Vault will replicate service tokens between clusters

Options :

A : Disaster Recovery Replication

B : Performance Replication

C : Vault Agent

D : Integrated Storage

Answer: A

Question 2

Which statement most accurately describes how the response wrapping feature functions in Vault?

Options :

A : Vault takes the response it would have sent to an HTTP client and instead inserts it into the cubbyhole of a single-use token, returning that single-use token instead.

B : Vault encrypts the response with a dedicated key and sends it directly to the client, never storing it on the server or using single-use tokens for additional security

C : Vault divides the response into separate parts and stores each part in different tokens, requiring all tokens to be combined before disclosing the secret to the requesting client.

D : Vault duplicates the response within a persistent token and allows multiple unwraps, ensuring that any user with the correct token can retrieve the secret repeatedly without time restrictions.

Answer: A

Question 3

Which of the following auth methods are intended for machine-to-machine authentication, and not necessarily human (operator) authentication? (Select four)

Options :

A : Okta

B : Tokens

C : TLS Certificates

D : Cloud-based Auth methods (AWS, Azure, GCP)

E : LDAP

F : AppRole

Answer: B,C,D,F

Question 4

Although batch and service tokens share many characteristics, which of the following are true only about batch tokens? (Select three)

Options :

A : Can create child tokens

B : Are renewable up until the max TTL

C : Maintain a single fixed TTL

D : They are valid for either the primary or any secondary clusters

E : They are not persisted to disk

Answer: C,D,E

Question 5

True or False? Although AppRole is designed for machines, humans can use it to authenticate to Vault if you wish.

Options :

A : True

B : False

Answer: A

Free HCVA0-003 Mock Exam – Practice Online Confidently

Buying Options: