Question 1

Vault policies are deny by default

Options :

A : TRUE

B : FALSE

Answer: A

Question 2

Scented Candle Company currently uses PingFederate for applications to authenticate to Active Directory using SAML2.0. The organization wants to reduce the number of direct connectivity to its AD servers and force everything through PingFederate.

What auth method should Scented Candle Company enable and configure for Vault?

Options :

A : UserPass

B : OIDC/JWT

C : LDAP

D : Okta

Answer: B

Question 3

Coffee Cups, Inc is integrating its legacy application with Vault to improve its security. However, the Vault operations team discovered that the application has issues when the token changes for authentication during testing.What type of token could be used to help alleviate this issue without compromising security?

Options :

A : Root Token

B : Periodic Service Token

C : Batch Token

D : Orphan Service Token

Answer: B

Question 4

After configuring Consul ACLs and issuing the tokens associated with the Vault policies, you've discovered that anybody can still access the Consul UI and browse and delete data on the KV store. Based on the configuration below, on which line does a configuration change need to be made in order to correct this?

Options :

A : 4

B : 2

C : 5

D : 1

E : 3

Answer: A

Question 5

What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)

Options :

A : access to all of the secret engines

B : ability to enable auth methods

C : persistent storage

D : faster deployment

E : encryption via TLS

Answer: A,C

Free VA-002-P Mock Exam – Practice Online Confidently

Buying Options: