Free HCVA0-003 Exam Dumps

Question 66

- (Topic 4)
All Vault instances, or clusters, include two built-in policies that are created automatically. Choose the two policies below and the correct information regarding each policy. (Select two)

A. The root policy is created automaticall
B. This policy provides superuser privileges and cannot be deleted
C. The admin policy is created automaticall
D. It provides administrative permissions but can be deleted if needed
E. The default policy is created automaticall
F. This policy can be modified but not deleted
G. The default policy is created automaticall
H. This policy cannot be modified but it can be deleted

Correct Answer:AC

Question 67

- (Topic 4)
You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?

A. VAULT_REDIRECT_ADDR
B. VAULT_CLUSTER_ADDR
C. VAULT_ADDR
D. VAULT_CAPATH

Correct Answer:C

Question 68

- (Topic 2)
Before the following command can be run to encrypt data, what (three) commands must be run to enable and configure the transit secrets engine in Vault? (Select three)
text CollapseWrapCopy
$ vault write transit/encrypt/vendor plaintext="aGFzaGljb3JwIGNlcnRpZmllZA=="

A. base64 <<< "hashicorp certified"
B. vault write transit/encrypt/vendor
C. vault secrets list
D. vault secrets enable transit
E. vault write -f transit/keys/vendor

Correct Answer:ADE

Question 69

- (Topic 5)
What command creates a secret with the key "my-password" and the value "53cr3t" at path "my-secrets" within the KV secrets engine mounted at "secret"?

A. vault kv put secret/my-secrets/my-password 53cr3t
B. vault kv write secret/my-secrets/my-password 53cr3t
C. vault kv write 53cr3t my-secrets/my-password
D. vault kv put secret/my-secrets »y-password-53cr3t

Correct Answer:A

Question 70

- (Topic 2)
Holly has discovered that a highly privileged dynamic credential with a very long lease time was created, which could negatively impact the organization??s security. What command can Holly use to invalidate the credential so it can??t be used without affecting other credentials?

A. vault lease revoke aws/creds/admin/27e1b9a1-27b8-83d9-9fe0-d99d786bdc83
B. Holly would need to delete the credential on the cloud platform directly
C. vault lease revoke -all
D. vault lease revoke aws/creds/admin/*

Correct Answer:A