HashiCorp vault associate 002 practice test

What environment variable overrides the CLIs default Vault server address?

• A. VAULT_ADDR
• B. VAULT_HTTP_ADDRESS
• C. VAULT_ADDRESS
• D. VAULT_HTTPS_ADDRESS

A user successfully logs into Vault with the following cURL command: curl --request POST --data @payload.json http://127.0.0.1:8200/v1/auth/ldap/login/mitchellh
The response will include what information?

• A. client_token and policies
• B. access_key and policies
• C. access_key and secrets available
• D. client_token and secrets available

Which endpoint can be used to list all tokens?

• A. /kv/secrets
• B. /auth/token/list
• C. /secrets/kv
• D. /auth/token/accessors

When looking at Vault token details, which key helps you find the paths the token is able to access?

• A. Meta
• B. Path
• C. Policies
• D. Accessor

Which of the following statements are true about the default policy? (Choose two.)

• A. It is one of the built-in policies
• B. Provides a common set of permissions and is included on all tokens by default
• C. Can not be modified or deleted
• D. Gives a super admin permissions, similar to a root user on a Linux machine
• E. Vault upgrade will overwrite any update you made to the default policy

Running the second command in the GUI CU will succeed.

• A. True
• B. False

Which of the following describes the Vaults auth method component?

• A. It verifies a client against an internal or external system, and generates a token with the appropriate policies attached
• B. It verifies a client against an internal or external system, and generates a token with root policy
• C. It is responsible for durable storage of client tokens
• D. It dynamically generates a unique set of secrets with appropriate permissions attached

A child token must be assigned the same or a subset the parent tokens policies.

• A. True
• B. False

What attributes are unique to batch tokens? (Choose three.)

• A. Cannot be renewed
• B. Are not persisted
• C. Can be periodic
• D. Have a set time-to-live (TTL)
• E. Are persisted

You can build a high availability Vault cluster with any storage backend.

• A. True
• B. False