Question 1

In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions

Options :

A : True

B : False

Answer: B

Question 2

When Vault stores its configuration and stored data on the storage backend, what system is responsible for encrypting and decrypting the data?

Options :

A : transit secrets engine

B : the storage backend

C : Vault

D : external key management service (Azure Key Vault, AWS KMS)

Answer: C

Question 3

What methods of authentication does Vault support? (select four)

Options :

A : AppRole

B : VMware

C : Android

D : GCP

E : LDAP

F : JWT

Answer: A,D

Question 4

Which of the following Vault features is available only in the Enterprise version? (select three)

Options :

A : MFA

B : dynamic credentials

C : cloud auto unseal

D : replication

E : auto unseal with HSM

Answer: A,D

Question 5

Which command is used to initialize Vault after first starting the Vault service?

Options :

A : vault create key

B : vault operator init

C : vault operator initialize keys

D : vault start

E : vault operator unseal

Answer: B

Free VA-002-P Mock Exam – Practice Online Confidently