Free HCVA0-003 Exam Dumps

Question 16

- (Topic 2)
Based on the following output, what command can Steve use to determine if the KV store is configured for versioning?
text CollapseWrapCopy
$ vault secrets list
Path Type Accessor Description
---- ---- -------- -----------
automation/ kv kv_56f991b9 Automation team for CI/CD cloud/ kv kv_4426c541 Cloud team for static secrets
cubbyhole/ cubbyhole cubbyhole_9bd538e per-token priv secret storage data_team/ kv kv_96d57692 Data warehouse KV for certs
identity/ identity identity_0042595e identity store network/ kv kv_3e53aaab Network team secret storage secret/ kv kv_d66e2adc key/value secret storage
sys/ system system_d6f218a9 system endpoints

A. vault secrets list -all
B. vault kv get automation
C. vault secrets list -detailed
D. vault kv list

Correct Answer:C

Question 17

- (Topic 5)
What is the Vault CLI command to query information about the token the client is currently using?

A. vault lookup token
B. vault token lookup
C. vault lookup self
D. vault self-lookup

Correct Answer:B

Question 18

- (Topic 4)
You have enabled the Transit secrets engine on your Vault cluster to provide an "encryption as a service" service as your team develops new applications. What is a prime use case for the Transit secrets engine?

A. Encrypting data before being written to an Amazon S3 bucket
B. Storing the encrypted data in Vault for easy retrieval
C. Generating dynamic SSH credentials for access to local systems
D. Creating X.509 certificates for a new fleet of containers

Correct Answer:A

Question 19

- (Topic 5)
A web application uses Vault's transit secrets engine to encrypt data in-transit. If an attacker intercepts the data in transit which of the following statements are true? Choose two correct answers.

A. You can rotate the encryption key so that the attacker won??t be able to decrypt the data
B. The keys can be rotated and min_decryption_version moved forward to ensure this data cannot be decrypted
C. The Vault administrator would need to seal the Vault server immediately
D. Even if the attacker was able to access the raw data, they would only have encrypted bits (TLS in transit)

Correct Answer:BD

Question 20

- (Topic 2)
Which statement best explains the role and usage of storage backends in HashiCorp Vault?

A. They store Vault??s persistent data, affecting the scalability and performance of managing Vault.
B. They handle the encryption of all secrets so that Vault remains completely stateless.
C. They store only ephemeral tokens, ensuring no persistent data is ever saved.
D. They store only unseal keys, while all secret data remains in Vault??s memory.

Correct Answer:A