Free HashiCorp Vault-Associate-002 Exam Dumps Questions & Answers

Which command will generate a new transit key?

• A.  vault create -f transit/keys/my-key
• B.  vault write -f transit/keys/my-key
• C.  vault put transit/keys/my-key
• D.  vault create transit/keys/my-key

To give a role the ability to display or output all of the end points under the /secrets/apps/* end point it would need to have which capability set?

• A.  sudo
• B.  update
• C.  None of the above
• D.  read
• E.  list

You have a 2GB Base64 binary large object (blob) that needs to be encrypted. Which of the following best describes the transit secrets engine?

• A.  To process such a large blob. Vault will temporarily store it in the storage backend.
• B.  The transit engine is not a good solution for binaries of this size.
• C.  A data key encrypts the blob locally, and the same key decrypts the blob locally.
• D.  Vault will store the blob permanently. Be sure to run Vault on a compute optimized machine.

Hotspot Question
For the following statements, choose which secrets engine enables the use case.
Each answer should only be used once.

Correct Answer:

Use this screenshot to answer the question below:

When are you shown these options in the GUI?

• A.  Enabling authentication engines
• B.  Enabling secret engines
• C.  Enabling policies
• D.  Enabling authentication methods