Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free HashiCorp VA-002-P Practice Exam with Questions & Answers | Set: 6

Questions 51

When using parent/child modules to deploy infrastructure, how would you export value from one module to import into another module?

For example, a module dynamically deploys an application instance or virtual machine, and you need the IP address in another module to configure a related DNS record in order to reach the newly deployed application.

Options:
A.

configure an output value in the application module in order to use that value for the DNS module

B.

preconfigure the IP address as a parameter in the DNS module

C.

configure the pertinent provider's configuration with a list of possible IP addresses to use

D.

export the value using terraform export and input the value using terraform input

HashiCorp VA-002-P Premium Access
Questions 52

Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

Options:
A.

FALSE

B.

TRUE

Questions 53

Which is not a benefit of running HashiCorp Vault in your environment?

Options:
A.

Integrate with your code repository to pull secrets when deploying your applications

B.

Consolidate static, long-lived passwords used throughout your organization

C.

Act as root or intermediate certificate authority to automate the generation of PKI certificates

D.

The ability to generate dynamic secrets for applications and resource access

Questions 54

True or False:

Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of Terraform.

Options:
A.

True

B.

False

Questions 55

Which of the following policies would permit a user to generate dynamic credentials on a database?

Options:
A.

path "database/creds/read_only_role" {

capabilities = ["read"]

}

B.

path "database/creds/read_only_role" {

capabilities = ["generate"]

}

C.

path "database/creds/read_only_role" {

capabilities = ["list"]

}

D.

path "database/creds/read_only_role" {

capabilities = ["sudo"]

}

Questions 56

Select all features which are exclusive to Terraform Enterprise. (select three)

Options:
A.

Audit Logs

B.

Cost Estimation

C.

Sentinel

D.

Clustering

E.

SAML/SSO

Questions 57

The userpass auth method has the ability to access external services in order to provide authentication to Vault.

Options:
A.

FALSE

B.

TRUE

Questions 58

Which of the following terraform subcommands could be used to remove the lock on the state for the current configuration?

Options:
A.

unlock

B.

Removing the lock on a state file is not possible

C.

force-unlock

D.

state-unlock

Questions 59

A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?

Options:
A.

add read permissions to the path secrets/apps

B.

modify the policy to allow the create permission

C.

remove the deny policy blocking access to the secrets/apps/app1 path

D.

add LIST to the policy so the user can browse the paths leading up to the key/value's path

Questions 60

As opposed to service tokens, batch tokens are ideal for what type of action?

Options:
A.

generating dynamic credentials

B.

configuring Vault features

C.

renewing tokens

D.

issuing snapshots

E.

encrypting data

F.

writing secrets

Exam Code: VA-002-P
Certification Provider: HashiCorp
Exam Name: HashiCorp Certified: Vault Associate
Last Update: May 15, 2025
Questions: 200

HashiCorp Related Exams

How to pass HashiCorp Vault-Associate - HashiCorp Certified: Vault Associate (002) Exam
Terraform-Associate-003 - HashiCorp Certified: Terraform Associate (003)
HashiCorp Free Access
Get HashiCorp Full Access

HashiCorp Free Exams
HashiCorp Free Exams
Unlock free HashiCorp exam resources and practice tests at Examstrack. Boost your HashiCorp exam readiness with top-notch materials.