HashiCorp Certified: Vault Associate (003)Exam - HCVA0-003 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. vault policy create my-policy /tmp/policy.hcl B. vault policy write my-policy - < < EOF
path " secret/data/* " {
capabilities = [ " create " , " update " ]
}
EOF C. $ cat user.hcl | vault policy write my-policy - D. vault policy write my-policy /tmp/policy.hcl

A. The database secrets engine B. The Identity secrets engine C. The Cubbyhole secrets engine D. The GCP secrets engine

A. True B. False

A. A value that describes which clients have access to the attached token B. A value that acts as a reference to a token which can be used to perform limited actions against the token C. A token used for clients to access Vault secrets engines D. Describes the value associated with the token's TTL

A. Rotating the Vault encryption key to adhere to internal security policies B. Unsealing Vault after a scheduled maintenance to install patches C. Generating a new root token as a break-glass procedure D. Creating a new set of recovery keys due to an employee leaving the organization

A. The threshold number of key shares B. A quorum of key shares C. One or more keys D. All key shares

A. The current time B. The end of the lease

A. AWS B. Token C. TLS D. LDAP E. GitHub F. Kubernetes G. OIDC H. AppRole

A. Look up a token's capabilities on a path B. Look up a token's properties C. Retrieve the actual token ID D. Renew the token E. Revoke the token

A. A PGP key. B. A long-lived token. C. The encryption key. D. PKI certificates.

A. Use the command vault lease revoke -force flag to delete the leases B. No action is required since the leases will eventually expire and be revoked C. Revoke all of the leases associated with the entire database secrets engine to be sure they are all removed D. Obtain the individual lease IDs from the application logs and remove them using the vault lease revoke command

A. /v1/sys/plugins/catalog B. /v1/sys/mounts C. /v1/sys/init D. /v1/sys/config

A. 7 days (168 hours) B. 32 days (768 hours) C. 14 days (336 hours) D. 31 days (744 hours)

A. The child tokens are converted to parent tokens B. The child tokens are revoked C. The child tokens are renewed D. The child tokens create their own child tokens to be used

A. In the systemd service file B. Inside the Vault service once Vault is up and running C. In the Vault configuration file D. In the Vault Agent sink file