2023 Updated HashiCorp VA-002-P Certification Study Guide Pass VA-002-P Fast [Q117-Q135]

NO.117 What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)

NO.118 When using providers that require the retrieval of data, such as the HashiCorp Vault provider, in what phase does Terraform actually retrieve the data required?

NO.119 You’ve deployed Vault in your production environment and are curious to understand metrics on your Vault cluster, such as the number of writes to the backend, the status of WALs, and the seal status. What feature would you configure in order to view these metrics?

NO.120 Which of the following is not an activity associated with the Vault transit secrets engine?

NO.121 Vault configuration files can be written in what languages? (select two)

NO.122 Which of the following is an invalid variable name?

NO.123 Which two interfaces automatically assume the token for subsequent requests after successfully authenticating? (select two)

NO.124 If a client is currently assigned the following policy, what additional policy can be added to ensure they cannot access the data stored at secret/apps/confidential but still, read all other secrets?

NO.125 Which of the following variable declarations is going to result in an error?

NO.126 Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

NO.127 The following is a snippet from a Terraform configuration file:
1. provider “aws” {
2. region = “us-east-1”
3. }
4. provider “aws” {
5. region = “us-west-1”
6. }
which, when validated, results in the following error:-
1. Error: Duplicate provider configuration
2.
3. on main.tf line 5:
4. 5: provider “aws” {
5.
6. A default provider configuration for “aws” was already given at
7. main.tf:1,1-15. If multiple configurations are required, set the “______”
8. argument for alternative configurations.
Fill in the blank in the error message with the correct string from the list below.

NO.128 The Vault Agent provides which of the following benefits? (select three)

NO.129 You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext=”1234 5678 9101 1121″
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

NO.130 What could you do with the feature found in the screenshot below? (select two)

NO.131 Select the two default policies created in Vault. (select two)

NO.132 When using constraint expressions to signify a version of a provider, which of the following are valid provider versions that satisfy the expression found in the following code snippet: (select two)
1. terraform {
2. required_providers {
3. aws = “~> 1.2.0”
4. }
5. }

NO.133 What Terraform feature is shown in the example below?
1. resource “aws_security_group” “example” {
2. name = “sg-app-web-01”
3. dynamic “ingress” {
4. for_each = var.service_ports
5. content {
6. from_port = ingress.value
7. to_port = ingress.value
8. protocol = “tcp”
9. }
10. }
11. }

NO.134 What system endpoint can you query to determine which node is the leader of a cluster?

NO.135 Select all features which are exclusive to Terraform Enterprise. (select three)