Question 1

The userpass auth method has the ability to access external services in order to provide authentication to Vault

Options :

A : FALSE

B : TRUE

Answer: A

Question 2

There are a few ways in Vault that can be used to obtain a root token. Select the valid methods from the answers below. (select three)

Options :

A :

using a batch DR operation token to create a new root token in the event of an emergency

B : running the command vault token create when using a valid root token

C : generating a root token using a quorum of recovery keys when using Vault auto unseal

D : initializing Vault when first creating the cluster by using vault operator init

Answer: B,C,D

Question 3

When Vault is sealed, which are the only two options available to a Vault administrator? (select two)

Options :

A : view the status of Vault

B : configure policies

C : author security policies

D : view data stored in the key/value store

E : rotate the encryption key

F : unseal Vault

Answer: A

Question 4

After configuring Consul ACLs and issuing the tokens associated with the Vault policies, you've discovered that anybody can still access the Consul UI and browse and delete data on the KV store. Based on the configuration below, on which line does a configuration change need to be made in order to correct this?

Options :

A : 4

B : 2

C : 5

D : 1

E : 3

Answer: A

Question 5

Which of the following best describes a token accessor?

Options :

A : . a value that acts as a reference to a token which can be used to perform limited actions against the token

B : a token used for Consul to access Vault auth methods

C : describes the value associated with the tokens TTL

D : a value that describes which clients have access to the attached token

Answer: A

Higher Test Marks with Free Online VA-002-P Exam Practice

Buying Options: