試験合格保証付きのHashiCorp Security Automation HCVA0-003試験問題集 [Q81-Q103]

質問 81
True or False? Once the lease for a dynamic secret has expired, Vault revokes the credentials on the backend platform for which they were created (i.e., database, AWS, Kubernetes).

質問 82
Two screenshots are shown in the exhibit.
You expect the ACL Policies menu to be shown as seen in Image 1. Instead, the ACL Policies menu is not displayed, as in Image 2.
Why would this menu not be displayed?

質問 83
True or False? After initializing Vault or restarting the Vault service, each individual node in the cluster needs to be unsealed.

質問 84
Your organization is integrating its legacy application with Vault to improve its security. However, you have discovered that the application has issues when the token changes for authentication during testing. What type of token could be used to help alleviate this issue without compromising security?

質問 85
You need to write a new policy for Vault for a group of users on the automation team. The requirements stipulate that each user (and all future users) get access to their own private section of a KV secrets engine at the path kv/team/ and be able to manage their own secrets. Which policy below meets these requirements while minimizing the administrative effort and following the principle of least privilege?

質問 86
You need to write a Vault operator policy and give the users access to perform administrative actions in Vault. What path is used for Vault backend functions?

質問 87
You have multiple Kubernetes pods that need frequent access to Vault to retrieve credentials for establishing connectivity to a backend database. You enable the Kubernetes auth method in Vault. What resource do you need to create within Kubernetes to complete this configuration?

質問 88
You need to create a limited-privileged token that isn’t impacted by the TTL of its parent. What type of token should you create?

質問 89
Which of the following vault lease operations uses a lease _ id as an argument? Choose two correct answers.

質問 90
Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates.
Which secrets engine will best support this use case?

質問 91
Which of the following tokens are representative of a batch token? (Select two)

質問 92
What command creates a secret with the key “my-password” and the value “53cr3t” at path “my-secrets” within the KV secrets engine mounted at “secret”?

質問 93
Your DevOps team would like to provision VMs in GCP via a CICD pipeline. They would like to integrate Vault to protect the credentials used by the tool. Which secrets engine would you recommend?

質問 94
True or False? The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at /aws.

質問 95
What features are offered by the Vault Agent? (Select three)

質問 96
When you are unsealing Vault using unseal keys, what are you actually doing?

質問 97
Vault supports which type of configuration for source limited token?

質問 98
You are performing a high number of authentications in a short amount of time. You’re experiencing slow throughput for token generation. How would you solve this problem?

質問 99
Why are short-lived, dynamic secrets in Vault more secure than long-lived, static credentials?

質問 100
To secure your applications, your organization uses certificates generated by a public CA. However, this strategy has proven expensive and you have to revoke certificates even though they have additional time left.
What Vault plugin can be used to quickly generate X.509 certificates to secure your internal applications?

質問 101
Which of the following cannot define the maximum time-to-live (TTL) for a token?

質問 102
What type of Vault token does not have a TTL (Time to Live)?

質問 103
Your Azure Subscription ID is stored in Vault and you need to retrieve it via Vault API for an automated job.
The Subscription ID is stored at secret/cloud/azure/subscription. The secret is stored on a KV Version 2 secrets engine. What curl command below would successfully retrieve the latest version of the secret?