最新的HashiCorp Certified: Vault Associate (003)Exam - HCVA0-003免費考試真題
Vault leases can be renewed based on what increment of time?
正確答案: A
說明：（僅 Fast2test 成員可見）
Which of the following are valid types of tokens available in Vault? (Select five)
正確答案: A,B,C,D,E
說明：（僅 Fast2test 成員可見）
What command would have created the token displayed below?
$ vault token lookup hvs.nNeZ2I64ALCxuO7dqQEJGPrO
Key: policies Value: [default dev], num_uses: 5, ttl: 767h59m49s
* Key Value
* --- -----
* accessor mfvaVMFgOcXHIeqlRasroSOn
* creation_time 1604610457
* creation_ttl 768h
* display_name token
* entity_id n/a
* expire_time 2024-12-07T16:07:37.7540672-05:00
* explicit_max_ttl 0s
* id hvs.nNeZ2I64ALCxuO7dqQEJGPrO
* issue_time 2024-11-05T16:07:37.7540672-05:00
* meta < nil >
* num_uses 5
* orphan false
* path auth/token/create
* policies [default dev]
* renewable true
* ttl 767h59m49s
* type service
$ vault token lookup hvs.nNeZ2I64ALCxuO7dqQEJGPrO
Key: policies Value: [default dev], num_uses: 5, ttl: 767h59m49s
* Key Value
* --- -----
* accessor mfvaVMFgOcXHIeqlRasroSOn
* creation_time 1604610457
* creation_ttl 768h
* display_name token
* entity_id n/a
* expire_time 2024-12-07T16:07:37.7540672-05:00
* explicit_max_ttl 0s
* id hvs.nNeZ2I64ALCxuO7dqQEJGPrO
* issue_time 2024-11-05T16:07:37.7540672-05:00
* meta < nil >
* num_uses 5
* orphan false
* path auth/token/create
* policies [default dev]
* renewable true
* ttl 767h59m49s
* type service
正確答案: A
說明：（僅 Fast2test 成員可見）
You have been tasked with writing a policy that will allow read permissions for all secrets at path secret/bar.
The users that are assigned this policy should also be able to list the secrets. What should this policy look like?
The users that are assigned this policy should also be able to list the secrets. What should this policy look like?
正確答案: C
說明：（僅 Fast2test 成員可見）
You need to connect to and manage a new HCP Vault cluster using the Vault CLI on your laptop. What environment variables should you set to establish connectivity?
正確答案: C
說明：（僅 Fast2test 成員可見）
Vault enables the generation of dynamic credentials against many different platforms. When generating these credentials, what Vault feature is used to track the credentials?
正確答案: A
說明：（僅 Fast2test 成員可見）
Which statement most accurately describes how the response wrapping feature functions in Vault?
正確答案: D
說明：（僅 Fast2test 成員可見）
An application has authenticated to Vault and has obtained dynamic database credentials with a lease of 4 hours. Four hours later, the credentials expire, and the application can no longer communicate with the backend database, so the application goes down. What should the developers instruct the application to do to prevent this from happening again while maintaining the same level of security?
正確答案: B
說明：（僅 Fast2test 成員可見）
If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?
path " secret/apps/* " { capabilities = [ " create " , " read " , " update " , " delete " , " list " ] }
path " secret/apps/* " { capabilities = [ " create " , " read " , " update " , " delete " , " list " ] }
正確答案: B
說明：（僅 Fast2test 成員可見）
Which of the following is a machine-oriented Vault authentication backend?
正確答案: A
說明：（僅 Fast2test 成員可見）
The key/value v2 secrets engine is enabled at secret/ See the following policy:
Which of the following operations are permitted by this policy? Choose two correct answers.
Which of the following operations are permitted by this policy? Choose two correct answers.
正確答案: A,B
說明：（僅 Fast2test 成員可見）
Which of the following secrets engines can store static secrets in Vault for future retrieval?
正確答案: B
說明：（僅 Fast2test 成員可見）
What is the default value of the VAULT_ADDR environment variable?
正確答案: D
說明：（僅 Fast2test 成員可見）
You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named " sally " with password " h0wN0wB4r0wnC0w " ? This new user will need the power-users policy.
正確答案: B
說明：（僅 Fast2test 成員可見）