Free HashiCorp HCVAO-002 Exam Questions

Become HashiCorp Certified with updated HCVAO-002 exam questions and correct answers

Page: 1 / 66

Total 328 Questions | Updated On: Jun 06, 2025

Add To Cart

Question 1

By default, Vault tokens that are created without a specific TTL are issued a TTL equal to the default TTL on the cluster. What is the default TTL in Vault?

A : 336 hours (two weeks)

B : 60 minutes (one hour)

C : 768 hours (32 days)

D : 24 hours (one day)

Answer: C

Question 2

Sally has logged into Vault but needs to renew a token before it expires (not her own token). Which of the following token attributes can be used to renew Sally's token?

A : ken accessor

B : entity policy

C : L

D : ken

Answer: A,D

Question 3

Using the Vault CLI, what command is used to authenticate to Vault?

A : ult creds

B : ult user

C : ult login

D : ult auth

Answer: C

Question 4

When creating a dynamic secret in Vault, Vault returns what value that can be used to renew or revoke the lease?

A : vocation_access

B : ken_revocation_id

C : ase_id

D : ult_accessor

Answer: C

Question 5

When architecting a Vault replication configuration, why should you never terminate TLS on a frontend load balancer?

A : Vault detects that the traffic has been unencrypted and re-encrypted, due to the load balancer, it will automatically drop the traffic as it is no longer trusted

B : ult generates self-signed mutual TLS for replication. If the LB is performing TLS termination, this will break the mutual TLS between nodes

C : ult requires that only Consul service discovery can be used to direct traffic to an active Vault node

D : ult replication won't work with the type of certificates that a traditional load balancer uses

Answer: B

Page: 1 / 66

Total 328 Questions | Updated On: Jun 06, 2025

Add To Cart