Free HashiCorp Certified: Vault Associate (002) Exam Vault-Associate Exam Practice Test

You are performing a high number of authentications in a short amount of time. You're experiencing slow throughput for token generation. How would you solve this problem?

• Increase the time-to-live on service tokens
• Implement batch tokens
• Establish a rate limit quota
• Reduce the number of policies attached to the tokens

Which of the following cannot define the maximum time-to-live (TTL) for a token?

• By the authentication method t natively provide a method of expiring credentials
• By the client system f credentials leaking
• By the mount endpoint configuration very password used
• A parent token TTL e password rotation tools and practices
• System max TTL

Which of these is not a benefit of dynamic secrets?

• Supports systems which do not natively provide a method of expiring credentials
• Minimizes damage of credentials leaking
• Ensures that administrators can see every password used
• Replaces cumbersome password rotation tools and practices

Which statement describes the results of this command: $ vault secrets enable transit

• Enables the transit secrets engine at transit path
• Requires a root token to execute the command successfully
• Enables the transit secrets engine at secret path
• Fails due to missing -path parameter
• Fails because the transit secrets engine is enabled by default

The Vault encryption key is stored in Vault's backend storage.

• True
• False

What are orphan tokens?

• Orphan tokens are tokens with a use limit so you can set the number of uses when you create them
• Orphan tokens are not children of their parent; therefore, orphan tokens do not expire when their parent does
• Orphan tokens are tokens with no policies attached
• Orphan tokens do not expire when their own max TTL is reached

An organization wants to authenticate an AWS EC2 virtual machine with Vault to access a dynamic database secret. The only authentication method which they can use in this case is AWS.

• True
• False

When using Integrated Storage, which of the following should you do to recover from possible data loss?

• Failover to a standby node
• Use snapshot
• Use audit logs
• Use server logs

Which of the following are replication methods available in Vault Enterprise? Choose two correct answers.

• Cluster sharding
• Namespaces
• Performance Replication
• Disaster Recovery Replication

You can build a high availability Vault cluster with any storage backend.

• True
• False