必ず合格できるHashiCorp VA-002-P試験の正確な202問題と解答あります
最新 [2024年10月12日]2024年最新の実際にある検証済みのVA-002-P問題集
質問 # 42
Which of the following storage backends are supported by HashiCorp technical support? (select four)
- A. Filesystem
- B. Consul
- C. DynamoDB
- D. Raft
- E. In-Memory
- F. MySQL
正解：A、B、D、E
解説：
Just to clarify, "HashiCorp supported" means, it is supported by HashiCorp's technical support, it doesn't mean that Vault supports the platform as a storage backend.
For example, DynamoDB is a valid storage backend, but it is not officially supported by HashiCorp technical support but it has got the community support.
In-Memory - HashiCorp Supported
MySQL - Community Supported
Raft - HashiCorp Supported
Dynamo DB - Community Supported
Consul - HashiCorp Supported
Filesystem - HashiCorp Supported
Check more details on below link:- https://www.vaultproject.io/docs/configuration/storage/in-memory
質問 # 43
You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121"
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4
- A. credit card numbers are not supported using the transit secrets engine since it is considered sensitive data
- B. the credit card number should not include spaces
- C. the plain text data needs to be encoded to base64
- D. the token used to issue the encryption request does not have the appropriate permissions
正解：C
解説：
When you send data to Vault for encryption, it must be in the form of base64-encoded plaintext for safe transport.
質問 # 44
What is the result of the following Vault command?
vault auth enable userpass
- A. mounts the userpass auth method to the default path
- B. Imports usernames and passwords from LDAP to the local database
- C. Enables Vault to use external services to authenticate clients to Vault
- D. allows Vault to access usernames and passwords stored in a second Vault cluster
正解：A
解説：
The auth enable command enables an auth method at a given path. If an auth method already exists at the given path, an error is returned.
Command to enable auth method vault auth <enable/disable> followed by the name of the auth method.
Additional parameters can be included to specify the name of the mount.
質問 # 45
To prepare for day-to-day operations, the root token should be safety saved outside of Vault in order to administer Vault
- A. False
- B. True
正解：A
解説：
It is generally considered a best practice to not persist root tokens. Instead, a root token should be generated using Vault's operator generate-root command only when absolutely necessary.
For day-to-day operations, the root token should be deleted after configuring other auth methods which will be used by admins and Vault clients.
質問 # 46
What is the proper command to enable the AWS secrets engine at the default path?
- A. vault secrets enable aws
- B. vault enable aws secrets engine
- C. vault enable secrets aws
- D. vault secrets aws enable
正解：A
解説：
The command format for enabling Vault features is vault <feature> <enable/disable> <name>, therefore the correct answer would be vault secrets enable aws
質問 # 47
Which is not a benefit of running HashiCorp Vault in your environment?
- A. The ability to generate dynamic secrets for applications and resource access
- B. Consolidate static, long-lived passwords used throughout your organization
- C. Integrate with your code repository to pull secrets when deploying your applications
- D. Act as root or intermediate certificate authority to automate the generation of PKI certificates
正解：C
解説：
Vault does not integrate with any VCS (Version Control System) to checkout or read code. However, It can use GitHub as an auth method.
質問 # 48
The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at aws/
- A. False
- B. True
正解：B
解説：
The lease command groups subcommands for interacting with leases attached to secrets.
Subcommands:
renew Renews the lease of a secret
revoke Revokes leases and secrets
Using the '-prefix' flag allows you to revoke the entire tree of secrets.
質問 # 49
What type of policy is shown below?
1. key_prefix "vault/" {
2. policy = "write"
3. }
4. node_prefix "" {
5. policy = "write"
6. }
7. service "vault" {
8. policy = "write"
9. }
10. agent_prefix "" {
11. policy = "write"
12. }
13. session_prefix "" {
14. policy = "write"
15. }
- A. Consul ACL policy for a Vault node
- B. Vault policy allowing access to certain paths
- C. Consul configuration policy to enable Consul features
- D. Vault token policy is written for a user
正解：A
解説：
If using ACLs in Consul, you'll need appropriate permissions. For Consul 0.8, these policies will work for most use-cases, assuming that your service name is vault and the prefix being used is vault/Consul ACLs should always be enabled when using Consul as a storage backend. This policy allows Vault to communicate to the required services hosted on Consul.
Reference link:- https://www.vaultproject.io/docs/configuration/storage/consul
質問 # 50
True or False? By default, Terraform destroy will prompt for confirmation before proceeding.
- A. False
- B. True
正解：B
解説：
Terraform destroy will always prompt for confirmation before executing unless passed the -auto-approve flag.
$ terraform destroy
Do you really want to destroy all resources?
Terraform will destroy all your managed infrastructure, as shown above.
There is no undo. Only 'yes' will be accepted to confirm.
Enter a value:
質問 # 51
What Terraform feature is shown in the example below?
1. resource "aws_security_group" "example" {
2. name = "sg-app-web-01"
3. dynamic "ingress" {
4. for_each = var.service_ports
5. content {
6. from_port = ingress.value
7. to_port = ingress.value
8. protocol = "tcp"
9. }
10. }
11. }
- A. conditional expression
- B. dynamic block
- C. local values
- D. data source
正解：B
解説：
You can dynamically construct repeatable nested blocks like ingress using a special dynamic block type, which is supported inside resource, data, provider, and provisioner blocks
質問 # 52
A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?
- A. remove the deny policy blocking access to the secrets/apps/app1 path
- B. add read permissions to the path secrets/apps
- C. add LIST to the policy so the user can browse the paths leading up to the key/value's path
- D. modify the policy to allow the create permission
正解：C
解説：
To view the paths leading up to the secrets/apps/app1 path in the user interface, the user must have at least LIST permissions to avoid permission denied error in the UI.
質問 # 53
Which auth method is ideal for machine to machine authentication?
- A. GitHub
- B. AppRole
- C. Okta
- D. UserPass
正解：B
解説：
The ideal method for a machine to machine authentication is AppRole although it's not the only method. The other options are frequently reserved for human access.
Reference link:- https://www.hashicorp.com/blog/authenticating-applications-with-vault-approle/
質問 # 54
When Vault is sealed, which are the only two options available to a Vault administrator? (select two)
- A. rotate the encryption key
- B. view data stored in the key/value store
- C. author security policies
- D. view the status of Vault
- E. configure policies
- F. unseal Vault
正解：D、F
解説：
When Vault is sealed, the only two options available are, viewing the vault status and unsealing Vault. All the other actions performed after the Vault is unsealed and the user is authenticated.
質問 # 55
In a Consul cluster, participating nodes can be only one of two types. Select the valid types. (select two)
- A. passive
- B. follower
- C. active
- D. secondary
- E. leader
- F. primary
正解：B、E
解説：
Within each datacenter, we have a mixture of clients and servers. It is expected that there be between three to five servers. This strikes a balance between availability in the case of failure and performance, as consensus gets progressively slower as more machines are added. However, there is no limit to the number of clients, and they can easily scale into the thousands or tens of thousands.
Server or Leader - It indicates whether the agent is running in server or client mode. Server nodes participate in the consensus quorum, storing cluster state, and handling queries. At any given time, the peer set elects a single node to be the leader. The leader is responsible for ingesting new log entries, replicating to followers, and managing when an entry is considered committed.
Client or Follower - Client nodes make up the majority of the cluster, and they are very lightweight as they interface with the server nodes for most operations and maintain a very little state of their own.
Reference link:- https://www.consul.io/docs/internals/architecture.html
質問 # 56
The Terraform language supports a number of different syntaxes for comments. Select all that are supported. (select three)
- A. <* and *>
- B. /* and */
- C. //
- D. #
正解：B、C、D
解説：
Terraform supports the #, //, and /*..*/ for commenting Terraform configuration files. Please use them when writing Terraform so both you and others who are using your code have a full understanding of what the code is intended to do.
https://www.terraform.io/docs/configuration/syntax.html#comments
質問 # 57
Which of the following actions are performed during a terraform init? (select three)
- A. provisions the declared resources in your configuration
- B. download the declared providers which are supported by HashiCorp
- C. initializes the backend configuration
- D. initializes downloaded and/or installed providers
正解：B、C、D
解説：
The terraform init command is used to initialize a working directory containing Terraform configuration files. This is the first command that should be run after writing a new Terraform configuration or cloning an existing one from version control. It is safe to run this command multiple times.
質問 # 58
True or False:
A list(...) may contain a number of values of the same type while an object(...) can contain a number of values of different types.
- A. False
- B. True
正解：B
解説：
A collection type allows multiple values of one other type to be grouped together as a single value. This includes a list, map, and set.
A structural type allows multiple values of several distinct types to be grouped together as a single value. This includes object and tuple.
質問 # 59
......
Hashicorp VA-002 Certification試験は、IT専門家がスキルを向上させ、キャリアを向上させるための優れた方法です。この認定を取得することにより、候補者は、業界で非常に人気のあるスキルであるVaultの専門知識を実証できます。さらに、この認定は求職者に競争上の優位性を提供し、Vaultを使用する組織との新しい雇用機会を開きます。
無料でゲット！2024年最新のに更新されたHashiCorp VA-002-P試験問題と解答：https://www.jpntest.com/shiken/VA-002-P-mondaishu
合格させるVA-002-P試験には更新された202問題あります：https://drive.google.com/open?id=1r1WRcu1ncmXzxiPRRIx5UGEBanBSo_Tn