Free HashiCorp HCVA0-003 Exam Questions

Question 1

You have a 2GB Base64 binary large object (blob) that needs to be encrypted.How will the Transit secrets engine manage the encryption lifecycle for a large blob?

A : A data key encrypts the blob locally, and the same key decrypts the blob locally.

B : Vault will store the blob permanently. Be sure to run Vault on a compute-optimized machine.

C : The Transit engine is not a good solution for binaries of this size.

D : To process such a large blob, Vault will temporarily store it in the storage backend.

Answer: A

Question 2

You have a 2GB Base64 binary large object (blob) that needs to be encrypted.How will the Transit secrets engine manage the encryption lifecycle for a large blob?

A : A data key encrypts the blob locally, and the same key decrypts the blob locally.

B : Vault will store the blob permanently. Be sure to run Vault on a compute-optimized machine.

C : The Transit engine is not a good solution for binaries of this size.

D : To process such a large blob, Vault will temporarily store it in the storage backend.

Answer: A

Question 3

You would like to provision virtual machines (VMs) using infrastructure as code (IaC). The VMs require anOAuth token to access GCP services during provisioning. You are required to use tokens that can begenerated and revoked automatically.Which secrets engine would meet this need?

A : Identity secrets engine

B : Key/Value secrets engine version 2

C : Google Cloud secrets engine

D : SSH secrets engine

Answer: C

Question 4

You have a 2GB Base64 binary large object (blob) that needs to be encrypted.How will the Transit secrets engine manage the encryption lifecycle for a large blob?

A : A data key encrypts the blob locally, and the same key decrypts the blob locally.

B : Vault will store the blob permanently. Be sure to run Vault on a compute-optimized machine.

C : The Transit engine is not a good solution for binaries of this size.

D : To process such a large blob, Vault will temporarily store it in the storage backend.

Answer: A

Question 5

You would like to provision virtual machines (VMs) using infrastructure as code (IaC). The VMs require anOAuth token to access GCP services during provisioning. You are required to use tokens that can begenerated and revoked automatically.Which secrets engine would meet this need?

A : Identity secrets engine

B : Key/Value secrets engine version 2

C : Google Cloud secrets engine

D : SSH secrets engine

Answer: C