Free HCVA0-003 Exam Dumps

Question 26

- (Topic 3)
In Vault, there are two main types of tokens, batch and service. Which of the following is true about the renewable capabilities of each?

A. Batch tokens cannot be renewed, but service can be renewed up to the max TTL
B. Tokens cannot be renewed without reauthenticating to Vault
C. Service tokens cannot be renewed, but batch can be renewed up to the max TTL
D. Both batch and service tokens can be renewed up to the max TTL

Correct Answer:A

Question 27

- (Topic 1)
True or False? Once you create a KV v1 secrets engine and place data in it, there is no way to modify the mount to include the features of a KV v2 secrets engine.

A. True
B. False

Correct Answer:B

Question 28

- (Topic 3)
You have TBs of data encrypted by Vault stored in a database and are worried about Vault becoming unavailable and not being able to decrypt the data. Is it possible to export the encryption key to store it somewhere else in the event Vault becomes unavailable?

A. Yes, as long as the key was configured to be exportable when it was created
B. No, you cannot export the encryption key from Vault

Correct Answer:A

Question 29

- (Topic 5)
The key/value v2 secrets engine is enabled at secret/ See the following policy:
HCVA0-003 dumps exhibit
Which of the following operations are permitted by this policy? Choose two correct answers.

A. vault kv get secret/webapp1
B. vault kv put secret/webapp1 apikey-"ABCDEFGHI] K123M"
C. vault kv metadata get secret/webapp1
D. vault kv delete secret/super-secret
E. vault kv list secret/super-secret

Correct Answer:AC

Question 30

- (Topic 1)
True or False? All dynamic secrets in Vault are required to have a lease.

A. True
B. False

Correct Answer:A

The certification names are the trademarks of their respective owners. testpreplab.com certstest.com