Free HashiCorp VA-002-P Exam Dumps Questions & Answers

You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?

• A.  modify the Terraform state file to add the new resources
• B.  shut down or stop using the resources being imported so no changes are inadvertently missed
• C.  update the configuration file to include the new resources
• D.  run terraform refresh to ensure that the state file has the latest information for existing resources.

Which of the following Vault policies will allow a Vault client to read a secret stored at secrets/applications/app01/api_key?

• A.  path "secrets/applications/+/api_*" {
  capabilities = ["read"]
  }
• B.  path "secrets/*" {
  capabilities = ["list"]
  }
• C.  path "secrets/applications/" {
  capabilities = ["read"]
  allowed_parameters = {
  "certificate" = []
  }
  }
• D.  path "secrets/applications/app01/api_key" {
  capabilities = ["update", "list"]
  }

Vault secrets engines are used to do what with data? (select three)

• A.  store
• B.  encrypt
• C.  copy
• D.  generate
• E.  transmit

Select the feature below that best completes the sentence:
The following list represents the different types of __________ available in Terraform.
1. max
2. min
3. join
4. replace
5. list
6. length
7. range

• A.  backends
• B.  functions
• C.  named values
• D.  data sources

Vault does not trust the storage backend.

• A.  True
• B.  False