Free HashiCorp Vault-Associate-002 Exam Dumps Questions & Answers

What can be used to limit the scope of a credential breach?

• A.  Sharing credentials between applications
• B.  Enable audit logging
• C.  Use of a short-lived dynamic secrets
• D.  Storage of secrets in a distributed ledger

Why might an application be mapped to an identity entity?

• A.  To get around cloud license limitations
• B.  To prohibit Vault administrators from revoking tokens associated with that application
• C.  To allow an application deployed with multiple authentication methods have a consistent set of policies
• D.  To allow the same application in one cloud to access already provisioned Vault tokens for that application in another clo

When an auth method is disabled, all users authenticated via that method lose access.

• A.  False
• B.  True

To create a non-root token with time-to-live (TTL) set to 30 minutes but with no max TTL which flag would you use?

• A.  -orphan
• B.  -ttl=30n
• C.  None of the above
• D.  -explicit-max-ttl=0

Vault Agent allows client-side caching of tokens and leases. If the agent is shut down, those tokens and leases cached will be revoked.

• A.  False
• B.  True