Free HashiCorp HCVA0-003 Exam Dumps Questions & Answers

When generating a dynamic secret, what value is returned that a user can use to renew or revoke the lease?

• A.  lease_max
• B.  renewable
• C.  token_ttl
• D.  lease_id

Which statement best explains how Vault handles data encryption?

• A.  Vault uses encryption to secure data at rest and in transit, using an encryption key protected by the root key.
• B.  Vault offloads all encryption to third-party services, so no secret data is ever processed by Vault.
• C.  Vault encrypts data using a root key stored in plain text on the server's filesystem.
• D.  Vault stores data in plaintext on disk but encrypts it only when transmitting it over the network.

You have a legacy application that requires secrets from Vault that must be written to a local configuration file. However, you cannot refactor the application to communicate directly with Vault.What solution should you implement to satisfy the requirements?

• A.  Use the Vault Proxy to act as a proxy for the Vault API
• B.  Use the Vault Agent and cache the newly created tokens and leases
• C.  Use the Vault Proxy with Auto-Auth to authenticate with Vault
• D.  Run the Vault Agent and use the templating feature

After setting up a new HashiCorp Vault server with the default configurations, which method can be used to unseal Vault?

• A.  Running vault operator init to regenerate unseal keys and automatically unseal the Vault
• B.  Submit a threshold of unseal keys to reconstruct the root key
• C.  Log on to each Vault node and provide the root token
• D.  Restart the Vault service, which will automatically unseal it

After encrypting data using the Transit secrets engine, you've received the following output. Which of the following is true based on the output displayed below?
Key: ciphertext Value: vault:v2:
45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

• A.  Similar to the KV secrets engine, the Transit secrets engine was enabled using the transit v2 option
• B.  The original encryption key has been rotated at least once
• C.  This is the second version of the encrypted data
• D.  The data is stored in Vault using a KV v2 secrets engine