Free HashiCorp Vault-Associate Exam Questions
Absolute Free Vault-Associate Exam Practice for Comprehensive Preparation
-
HashiCorp Vault-Associate Exam Questions
-
Provided By: HashiCorp
- Exam: HashiCorp Certified: Vault Associate (002)
- Certification: HashiCorp Security Automation
-
Total Questions: 288
-
Updated On: May 11, 2025
-
Rated: 4.9 |
-
Online Users: 576
-
Question 1
-
True or False? When encrypting data with the Transit secrets engine, Vault always stores the
ciphertext in a dedicated KV store along with the associated encryption key.
Answer: B
-
True or False? When encrypting data with the Transit secrets engine, Vault always stores the
ciphertext in a dedicated KV store along with the associated encryption key.
-
Question 2
-
You have a new team member on the Vault operations team. Their first task is to rotate the
encryption key in Vault as part of the organization's security policy. However, when they log in, they
get an access denied error when attempting to rotate the key. The policy being used is below. Why can't the user rotate the encryption key?
path "auth/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "sys/rotate" {
capabilities = ["read", "update"]
}
Answer: A
-
You have a new team member on the Vault operations team. Their first task is to rotate the
encryption key in Vault as part of the organization's security policy. However, when they log in, they
get an access denied error when attempting to rotate the key. The policy being used is below. Why can't the user rotate the encryption key?
path "auth/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "sys/rotate" {
capabilities = ["read", "update"]
}
-
Question 3
-
What is the proper command to enable the AWS secrets engine at the default path?
Answer: B
-
What is the proper command to enable the AWS secrets engine at the default path?
-
Question 4
-
Which of the following token attributes can be used to renew a token in Vault (select two)?
Answer: B,D
-
Which of the following token attributes can be used to renew a token in Vault (select two)?
-
Question 5
-
True or False? A token can be renewed up until the max TTL, even if the TTL has been reached.
Answer: B
-
True or False? A token can be renewed up until the max TTL, even if the TTL has been reached.