Question 1

Your organization uses a CI/CD pipeline to deploy its applications on Azure. During testing, you generate new credentials to validate Vault can create new credentials. The result of this command is below:

$ vault read azure/creds/bryan-krausen

Key Value

--- -----

lease_id azure/creds/bryan-krausen/9eed0373-ca92-99b6-b914-779b7bb0e1d9

lease_duration 60m

lease_renewable true

client_id 532bf678-ee4e-6be1-116b-4e4221e445dd

client_secret be60395b-4e6b-2b7e-a4b3-c449a5c00973

What commands can be used to revoke this secret after you have finished testing? (select three)

Options :

A : vault lease revoke -prefix azure/creds/bryan-krausen

B : vault lease revoke azure/creds/bryan-krausen

C : vault lease revoke azure/

D : vault lease revoke -prefix azure/

E : vault lease revoke azure/creds/bryan-krausen/9eed0373-ca92-99b6-b914-779b7bb0e1d9

Answer: A,D

Question 2

Vault operators can create two types of groups in Vault. What are the two types?

Options :

A : external groups

B : user groups

C : policy groups

D : security groups

E : internal groups

Answer: A

Question 3

What methods of authentication does Vault support? (select four)

Options :

A : AppRole

B : VMware

C : Android

D : GCP

E : LDAP

F : JWT

Answer: A,D

Question 4

The userpass auth method has the ability to access external services in order to provide authentication to Vault

Options :

A : FALSE

B : TRUE

Answer: A

Question 5

You have a long-running app which can not handle a regeneration of a token or secret. What type of token should be created for this application in order to interact with Vault?

Options :

A : Orphan Tokens

B : Batch Token

C : Service Tokens with Use Limit

D : Periodic Service Tokens

Answer: D

Higher Test Marks with Free Online VA-002-P Exam Practice

Buying Options: