Question 1

After configuring Consul ACLs and issuing the tokens associated with the Vault policies, you've discovered that anybody can still access the Consul UI and browse and delete data on the KV store. Based on the configuration below, on which line does a configuration change need to be made in order to correct this?

Options :

A : 4

B : 2

C : 5

D : 1

E : 3

Answer: A

Question 2

There are a few ways in Vault that can be used to obtain a root token. Select the valid methods from the answers below. (select three)

Options :

A :

using a batch DR operation token to create a new root token in the event of an emergency

B : running the command vault token create when using a valid root token

C : generating a root token using a quorum of recovery keys when using Vault auto unseal

D : initializing Vault when first creating the cluster by using vault operator init

Answer: B,C,D

Question 3

What is the proper command to enable the AWS secrets engine at the default path?

Options :

A : vault enable secrets aws

B : vault secrets aws enable

C : vault secrets enable aws

D : vault enable aws secrets engine

Answer: C

Question 4

Frapps, Inc. is a new coffee startup in Boston that specializes in frozen caffeinated drinks. Their new web app for customer loyalty uses Vault to store all sensitive information. During the Vault design, they chose to use Integrated Storage due to all of its benefits.Select the benefits the organization would see by using Integrated Storage over other storage backends (select four)

Options :

A : simplified troubleshooting since Integrated Storage is a built-in solution

B : eliminates network communication between hosts, requiring no open ports between hosts

C : reduces operational overhead since all configuration is within Vault itself

D : immediate access to storage since the data is stored locally on disk

E : uses the SERF gossip protocol to enable communication between cluster nodes

F : eliminates the requirement to deploy and manage a separate platform for storing encrypted data

Answer: A,C,D

Question 5

What is the proper command to enable the AWS secrets engine at the default path?

Options :

A : vault enable secrets aws

B : vault secrets aws enable

C : vault secrets enable aws

D : vault enable aws secrets engine

Answer: C

Free VA-002-P Mock Exam – Practice Online Confidently

Buying Options: