Free HashiCorp HCVAO-002 Exam Questions

Become HashiCorp Certified with updated HCVAO-002 exam questions and correct answers

Page: 1 / 66

Total 328 Questions | Updated On: Jul 30, 2025

Add To Cart

Question 1

Which TCP port does Vault replication use?

A : 8200

B : 8201

C : 8300

D : 8301

Answer: B

Question 2

Before data is written to the storage backend, the data is encrypted by which Vault feature?

A : ansit secrets engine

B : certificate

C : eal keys

D : yptographic barrier

Answer: D

Question 3

When a primary Vault cluster fails, Vault will automatically promote a secondary cluster to ensure maximum uptime

A : lse

B : ue

Answer: A

Question 4

When architecting a Vault replication configuration, why should you never terminate TLS on a frontend load balancer?

A : Vault detects that the traffic has been unencrypted and re-encrypted, due to the load balancer, it will automatically drop the traffic as it is no longer trusted

B : ult generates self-signed mutual TLS for replication. If the LB is performing TLS termination, this will break the mutual TLS between nodes

C : ult requires that only Consul service discovery can be used to direct traffic to an active Vault node

D : ult replication won't work with the type of certificates that a traditional load balancer uses

Answer: B

Question 5

Your organization recently suffered a security breach on a specific application, and the security response team believes that MySQL database credentials were likely obtained during the event. The application generated the credentials using the database secrets engine in Vault mounted the path database/.

How can you quickly revoke all of the secrets generated by this secrets engine?

A : ult token revoke database/*

B : ult secrets disable mysql

C : ult lease renew database/creds/mysql

D : ult lease revoke -prefix database/

Answer: D

Page: 1 / 66

Total 328 Questions | Updated On: Jul 30, 2025

Add To Cart