최신HashiCorp Certified: Vault Associate (002) - Vault-Associate-002무료샘플문제
문제1
You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named "sally" with password "h0wN0wB4r0wnC0w"? This new user will need the power-users policy.
You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named "sally" with password "h0wN0wB4r0wnC0w"? This new user will need the power-users policy.
정답: B
문제2
The 'alpha' secrets are stored in the team-based paths using this convention:
secret/<team_name>/alpha. For example, secret/team01/alphaand
/secrets/team02/alpha.
Which Vault policy would not allow reading paths with the word "beta" in them, such as secrets/team01/beta?
The 'alpha' secrets are stored in the team-based paths using this convention:
secret/<team_name>/alpha. For example, secret/team01/alphaand
/secrets/team02/alpha.
Which Vault policy would not allow reading paths with the word "beta" in them, such as secrets/team01/beta?
정답: C
문제3
You manage two Vault dusters: "vaultduster1.acme.corp" and "vaultduster2.acme.corp". You want to write a secret to the first Vaultcluster vaultcluster1.acme.corp and run vault kv put secret/foo value='bar'. The command times out and the error references the Vault cluster, "vaultcluster2.acme.corp".
You run the command again with the following address flag:
vault kv put -address='https://vaultcluster1.acme.corp' secret/foo
value='bar'
The command completes successfully. You find that the terminal session defines the environment variable VAULT_ADDR='https://vaultcluster2.acxe.corp:8200' Why was the second attempt successful?
You manage two Vault dusters: "vaultduster1.acme.corp" and "vaultduster2.acme.corp". You want to write a secret to the first Vaultcluster vaultcluster1.acme.corp and run vault kv put secret/foo value='bar'. The command times out and the error references the Vault cluster, "vaultcluster2.acme.corp".
You run the command again with the following address flag:
vault kv put -address='https://vaultcluster1.acme.corp' secret/foo
value='bar'
The command completes successfully. You find that the terminal session defines the environment variable VAULT_ADDR='https://vaultcluster2.acxe.corp:8200' Why was the second attempt successful?
정답: C
문제4
When enabling auto-unseal, how do you specify the seal type? (Choose two.)
When enabling auto-unseal, how do you specify the seal type? (Choose two.)
정답: B,C
문제5
Which statement is true about an orphan token?
Which statement is true about an orphan token?
정답: C
문제6
What does the following policy do?
What does the following policy do?
정답: C
문제7
What is not a function provided by Vault's transit secret engine?
What is not a function provided by Vault's transit secret engine?
정답: B