Question 1

You are working on a new project and need to retrieve a secret from Vault. You log into the Vault UI and browse to the path where the secret is stored. Based on the screenshot below, what is true about the secrets stored in this path? (Select four)

Options :

A : The secrets are stored in a KV v1 secrets engine

B : The user does not have permission to delete the secret

C : The secrets are stored in a KV v2 secrets engine

D : The secrets engine is mounted at the path developers/

E : There are four previous versions of the secret

F : The user has additional permissions on the path beyond just list and read

Answer: C,D,E,F

Question 2

What is the proper command to enable the AWS secrets engine at the default path?

Options :

A : vault enable aws secrets engine

B : vault secrets enable aws

C : vault secrets aws enable

D : vault enable secrets aws

Answer: B

Question 3

Hanna is working with Vault and has been assigned a namespace called integration, where she stores all her secrets. Hanna configured her application to use the following API request, but the request is failing. What changes below will help Hanna correctly retrieve the secret? (Select two) $ curl \ --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" \ --request GET \ https://vault.example.com:8200/v1/secret/data/my-secret

Options :

A : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET\integration https://vault.example.com:8200/v1/secret/data/my-secret

B : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET --namespace "integration" https://vault.example.com:8200/v1/secret/data/my-secret

C : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --request GET https://vault.example.com:8200/v1/integration/secret/data/my-secret

D : $ curl --header "X-Vault-Token:hvs.lzrmRe5Y3LMcDRmOttEjWoag" --header "X VaultNamespace:integration" --request GET https://vault.example.com:8200/v1/secret/data/my-secret

Answer: C,D

Question 4

From the options below, select the auth methods that are better suited for machine-to-machine authentication (select five):

Options :

A : Kubernetes

B : GitHub

C : TLS

D : Token

E : AppRole

F : AWS

G : LDAP

H : OIDC

Answer: A,C,D,E,F

Question 5

Which of the following best describes a token accessor?

Options :

A : A value that describes which clients have access to the attached token

B : Describes the value associated with the token-s TTL

C : A token used for clients to access Vault secrets engines

D : A value that acts as a reference to a token which can be used to perform limited actions against the token

Answer: D

Free HCVA0-003 Mock Exam – Practice Online Confidently

Buying Options: