[Jun 13, 2023] Latest HashiCorp VA-002-P Exam Practice Test To Gain Brilliante Result [Q51-Q75]

NEW QUESTION 51
What type of policy is shown below?
1. key_prefix “vault/” {
2. policy = “write”
3. }
4. node_prefix “” {
5. policy = “write”
6. }
7. service “vault” {
8. policy = “write”
9. }
10. agent_prefix “” {
11. policy = “write”
12. }
13. session_prefix “” {
14. policy = “write”
15. }

Vault policy allowing access to certain paths

Consul ACL policy for a Vault node

Consul configuration policy to enable Consul features

Vault token policy is written for a user

NEW QUESTION 52
In the example below, where is the value of the DNS record’s IP address originating from?
1. resource “aws_route53_record” “www” {
2. zone_id = aws_route53_zone.primary.zone_id
3. name = “www.helloworld.com”
4. type = “A”
5. ttl = “300”
6. records = [module.web_server.instance_ip_addr]
7. }

value of the web_server parameter from the variables.tf file

the output of a module named web_server

the regular expression named module.web_server

by querying the AWS EC2 API to retrieve the IP address

NEW QUESTION 53
You’ve logged into the Vault CLI and attempted to enable an auth method, but received this error message. What can be done to resolve the error and configure Vault?
Error enabling userpass auth: Post https://127.0.0.1:8200/v1/sys/auth/userpass: http: server gave HTTP response to HTTPS client

change ‘userpass’ to ‘username and password’

restart the Vault service on this node

set the VAULT_ADDR environment variable to HTTP

ask an admin to grant you permission to enable the userpass auth method

NEW QUESTION 54
Environment variables can be used to set variables. The environment variables must be in the format “____”_<variablename>. Select the correct prefix string from the following list.

TF_VAR

TF_VAR_NAME

TF_ENV

TF_ENV_VAR

NEW QUESTION 55
What is the result of the following terraform function call?
index([“a”, “b”, “c”], “c”)

1

true

2

0

NEW QUESTION 56
Which commands are available only after Vault has been unsealed? (select two)

vault login -method=ldap -username=vault

vault operator unseal

vault kv get kv/apps/app01

vault status

NEW QUESTION 57
When configuring Vault replication and monitoring its status, you keep seeing something called ‘WALs’. What are WALs?

wake after lan

warning of allocated logs

write-ahead log

write along logging

NEW QUESTION 58
The security barrier protects all of the following Vault components except ___.

secret engine

auth method

storage backend

audit devices

token store

NEW QUESTION 59
What happens when a terraform plan is executed?

the backend is initialized and the working directory is prepped

creates an execution plan and determines what changes are required to achieve the desired state in the configuration files.

applies the changes required in the target infrastructure in order to reach the desired configuration

reconciles the state Terraform knows about with the real-world infrastructure

NEW QUESTION 60
When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module?
For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

configure an output value in the application module in order to use that value for the DNS module

preconfigure the IP address as a parameter in the DNS module

configure the pertinent provider’s configuration with a list of possible IP addresses to use

export the value using terraform export and input the value using terraform input

NEW QUESTION 61
Which of the following settings are configured using the configuration file? (select three)

Cluster Name

Replication

Seal Type

Auth Methods

Namespaces

Storage Backend

Audit Devices

NEW QUESTION 62
What is the result of the following terraform function call?
zipmap([“a”, “b”], [1, 2])

{
“a”,
“b”,
“1”,
“2”,
}

[
“a”,
“b”,
“1”,
“2”,
]

{
“a” = 1
“b” = 2
}

[
“a” = 1
“b” = 2
]

NEW QUESTION 63
Beyond encryption and decryption of data, which of the following is not a function of the Vault transit secrets engine?

generate hashes and HMACs of data

sign and verify data

act as a source of random bytes

store the encrypted data securely in Vault for retrieval

NEW QUESTION 64
You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext=”1234 5678 9101 1121″
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

credit card numbers are not supported using the transit secrets engine since it is considered sensitive data

the token used to issue the encryption request does not have the appropriate permissions

the plain text data needs to be encoded to base64

the credit card number should not include spaces

NEW QUESTION 65
Which of the following statements best describes the Terraform list(…) type?

a collection of unique values that do not have any secondary identifiers or ordering.

a collection of values where each is identified by a string label.

a sequence of values identified by consecutive whole numbers starting with zero.

a collection of named attributes that each have their own type.

NEW QUESTION 66
In Terraform Enterprise, a workspace can be mapped to how many VCS repos?

5

3

2

1

NEW QUESTION 67
What is the Consul Agent?

a process that registers services with Consul

an agent that runs in the background to provide additional features for Consul

the core process of Consul which maintains membership information, manages services, runs checks, responds to queries, and more.

a daemon that Vault uses to register auth methods across all of its clusters to ensure consistency among the data written to disk

NEW QUESTION 68
HashiCorp offers multiple versions of Terraform, including Terraform open-source, Terraform Cloud, and Terraform Enterprise. Which of the following Terraform features are only available in the Enterprise edition? (select four)

Sentinel

SAML/SSO

Audit Logs

Private Network Connectivity

Private Module Registry

Clustering

NEW QUESTION 69
Which of the following best describes a Terraform provider?

describes an infrastructure object, such as a virtual network, compute instance, or other components

a container for multiple resources that are used together

serves as a parameter for a Terraform module that allows a module to be customized

a plugin that Terraform uses to translate the API interactions with the service or provider

NEW QUESTION 70
When creating a dynamic secret in Vault, Vault returns what value that can be used to renew or revoke the lease?

lease_id

vault_accessor

revocation_access

token_revocation_id

NEW QUESTION 71
Which three interfaces can be used to access Vault? (select three)

JSON

CLI

RPC

UI

API

Consul

NEW QUESTION 72
Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered deployment?

Cassandra

MSSQL

PostgreSQL

MySQL

NEW QUESTION 73
When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?

terraform apply

terraform plan

terraform init

terraform delete

NEW QUESTION 74
What type of token does not have a TTL (time to live)?

default tokens

parent tokens

user tokens

root tokens

expired tokens

child tokens

NEW QUESTION 75
Select all Operating Systems that Terraform is available for. (select five)

Linux

Windows

Unix

FreeBSD

Solaris

macOS

Related posts:

admin

You might also like

Leave a Reply Cancel reply