VA-002-P Online Practice Questions and Answers

Correct Answer: D

After initializing, Vault provides the root token to the user, this is the only way to log in to Vault to configure additional auth methods.

Correct Answer: D

After authenticating, a client is issued a security token which is associated with a policy. That token is used to make a subsequent request to Vault, such as read, write, etc.

Correct Answer: A

Everything in Vault is path-based including policies. Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault. Policies are deny by default, so an empty policy grants no permission in the system.

Correct Answer: C

Replication is not available in open-source versions of Vault. It is an enterprise feature.

Correct Answer: A

The Active Directory secrets engine rotates Active Directory passwords dynamically. It does not, however, dynamically generate the AD account. The AD account must exist prior to configuring it in Vault. If it does not, the configuration will fail, stating that the account doesn't exist. Reference link:- https:// www.vaultproject.io/docs/secrets/ad

Correct Answer: E

Terraform has detailed logs that can be enabled by setting the TF_LOG environment variable to any value. This will cause detailed logs to appear on stderr. You can set TF_LOG to one of the log levels TRACE, DEBUG, INFO, WARN, or ERROR to change the verbosity of the logs. TRACE is the most verbose and it is the default if TF_LOG is set to something other than a log level name.

Correct Answer: B

The format of resource block configurations is as follows: "" ""

Correct Answer: C

For local state, Terraform stores the workspace states in a directory called terraform.tfstate.d. https:// www.terraform.io/docs/state/workspaces.html#workspace-internals

Correct Answer: C

terraform force-unlock removes the lock on the state for the current configuration.

Correct Answer: C

lookup retrieves the value of a single element from a map, given its key. If the given key does not exist, the given default value is returned instead. In this case, the function call is searching for the key "c". But since there is no key "c", the default vault "what?" is returned. https://www.terraform.io/docs/configuration/ functions/lookup.html