Achieve the VA-002-P Exam Best Results with Help from HashiCorp Certified Experts
Provide VA-002-P Practice Test Engine for Preparation
HashiCorp VA-002-P Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
NEW QUESTION 91
Select the answer below that completes the following statement:
Terraform Cloud can be managed from the CLI but requires __________?
- A. a username and password
- B. authentication using MFA
- C. a TOTP token
- D. an API token
Answer: D
Explanation:
API and CLI access are managed with API tokens, which can be generated in the Terraform Cloud UI. Each user can generate any number of personal API tokens, which allow access with their own identity and permissions. Organizations and teams can also generate tokens for automating tasks that aren't tied to an individual user.
NEW QUESTION 92
In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.
- A. True
- B. False
Answer: B
Explanation:
Consul nodes in the same cluster should not be provisioned across multiple data centers or cloud regions due to the low-latency requirements.
NEW QUESTION 93
When configuring Vault replication and monitoring its status, you keep seeing something called 'WALs'. What are WALs?
- A. warning of allocated logs
- B. write along logging
- C. wake after lan
- D. write-ahead log
Answer: D
Explanation:
Reference links:-
https://learn.hashicorp.com/vault/day-one/monitor-replication
https://www.vaultproject.io/docs/internals/replication
NEW QUESTION 94
Vault configuration files can be written in what languages? (select two)
- A. HCL
- B. JSON
- C. XML
- D. YAML
Answer: A,B
Explanation:
The Vault configuration file supports either JSON or HCL, which is HashiCorp Configuration Language
NEW QUESTION 95
Permissions for Vault backend functions are available at which path?
- A. security/
- B. sys/
- C. system/
- D. vault/
- E. backend/
- F. admin/
Answer: B
Explanation:
All backend system functions stored in the sys/ backend.
The system backend is a default backend in Vault that is mounted at the /sys endpoint. This endpoint cannot be disabled or moved, and is used to configure Vault and interact with many of Vault's internal features.
NEW QUESTION 96
Which commands are available only after Vault has been unsealed? (select two)
- A. vault operator unseal
- B. vault kv get kv/apps/app01
- C. vault status
- D. vault login -method=ldap -username=vault
Answer: B,D
Explanation:
Once Vault is unsealed, you can run vault login -method=ldap -username=vault and vault kv get kv/apps/app01. The second command assumes that you have authenticated but it cannot be run unless Vault is unsealed. vault status can be run regardless of Vault is sealed or unsealed, and vault operator unseal can only be run when the vault is sealed.
NEW QUESTION 97
Which is not a benefit of running HashiCorp Vault in your environment?
- A. Act as root or intermediate certificate authority to automate the generation of PKI certificates
- B. Integrate with your code repository to pull secrets when deploying your applications
- C. Consolidate static, long-lived passwords used throughout your organization
- D. The ability to generate dynamic secrets for applications and resource access
Answer: B
Explanation:
Vault does not integrate with any VCS (Version Control System) to checkout or read code. However, It can use GitHub as an auth method.
NEW QUESTION 98
Which of the following represents a feature of Terraform Cloud that is NOT free to customers?
- A. workspace management
- B. private module registry
- C. roles and team management
- D. VCS integration
Answer: C
NEW QUESTION 99
Which TCP port does Vault replication use?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Check below link for details:- https://learn.hashicorp.com/vault/operations/ops-reference-architecture
NEW QUESTION 100
Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?
- A. terraform show
- B. terraform format
- C. terraform validate
- D. terraform fmt
Answer: C
Explanation:
The terraform validate command validates the configuration files in a directory, referring only to the configuration and not accessing any remote services such as remote state, provider APIs, etc.
Validate runs checks that verify whether a configuration is syntactically valid and internally consistent, regardless of any provided variables or existing state. It is thus primarily useful for general verification of reusable modules, including the correctness of attribute names and value types.
NEW QUESTION 101
When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime.
- A. True
- B. False
Answer: B
Explanation:
Vault secondary clusters must be manually promoted to a primary.
NEW QUESTION 102
In a Consul cluster, participating nodes can be only one of two types. Select the valid types. (select two)
- A. follower
- B. secondary
- C. passive
- D. active
- E. leader
- F. primary
Answer: A,E
Explanation:
Within each datacenter, we have a mixture of clients and servers. It is expected that there be between three to five servers. This strikes a balance between availability in the case of failure and performance, as consensus gets progressively slower as more machines are added. However, there is no limit to the number of clients, and they can easily scale into the thousands or tens of thousands.
Server or Leader - It indicates whether the agent is running in server or client mode. Server nodes participate in the consensus quorum, storing cluster state, and handling queries. At any given time, the peer set elects a single node to be the leader. The leader is responsible for ingesting new log entries, replicating to followers, and managing when an entry is considered committed.
Client or Follower - Client nodes make up the majority of the cluster, and they are very lightweight as they interface with the server nodes for most operations and maintain a very little state of their own.
Reference link:- https://www.consul.io/docs/internals/architecture.html
NEW QUESTION 103
Select the feature below that best completes the sentence:
The following list represents the different types of __________ available in Terraform.
1. max
2. min
3. join
4. replace
5. list
6. length
7. range
- A. functions
- B. data sources
- C. named values
- D. backends
Answer: A
Explanation:
The Terraform language includes a number of built-in functions that you can call from within expressions to transform and combine values. The Terraform language does not support user-defined functions, and only the functions built into the language are available for use.
NEW QUESTION 104
Environment variables can be used to set variables. The environment variables must be in the format "____"_<variablename>. Select the correct prefix string from the following list.
- A. TF_ENV_VAR
- B. TF_ENV
- C. TF_VAR_NAME
- D. TF_VAR
Answer: D
Explanation:
Environment variables can be used to set variables. The environment variables must be in the format TF_VAR_name and this will be checked last for a value. For example:
export TF_VAR_region=us-west-1
export TF_VAR_ami=ami-049d8641
export TF_VAR_alist='[1,2,3]'
export TF_VAR_amap='{ foo = "bar", baz = "qux" }'
https://www.terraform.io/docs/commands/environment-variables.html
NEW QUESTION 105
What could you do with the feature found in the screenshot below? (select two)
- A. using a short TTL, you could encrypt data in order to place only the encrypted data in Vault
- B. use response-wrapping to protect data
- C. encrypt the Vault master key that is stored in memory
- D. encrypt sensitive data to send to a colleague over email
Answer: B,D
Explanation:
Vault includes a feature called response wrapping. When requested, Vault can take the response it would have sent to an HTTP client and instead insert it into the cubbyhole of a single-use token, returning that single-use token instead.
NEW QUESTION 106
From the options below, select the benefits of using the PKI (certificates) secrets engine: (select three)
- A. reduces time to get a certificate by eliminating the need to generate a private key and CSR
- B. Vault can act as an intermediate CA
- C. TTLs on Vault certs are longer to ensure certificates are valid for a longer period of time
- D. reducing, or eliminating certificate revocations
Answer: A,B,D
Explanation:
Reference link:- https://www.vaultproject.io/docs/secrets/pki
NEW QUESTION 107
When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module?
For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.
- A. configure an output value in the application module in order to use that value for the DNS module
- B. configure the pertinent provider's configuration with a list of possible IP addresses to use
- C. preconfigure the IP address as a parameter in the DNS module
- D. export the value using terraform export and input the value using terraform input
Answer: A
Explanation:
Output values are like the return values of a Terraform module and have several uses such as a child module using those outputs to expose a subset of its resource attributes to a parent module.
NEW QUESTION 108
......
Detailed New VA-002-P Exam Questions for Concept Clearance: https://www.braindumpquiz.com/VA-002-P-exam-material.html
VA-002-P Exam Preparation Material with New VA-002-P Dumps Questions.: https://drive.google.com/open?id=1a8-mJ4bg_zBrfsxuJdZPR6cXMSLg8ML1