Free HCVA0-003 Questions for HashiCorp Certified: Vault Associate (003)Exam HCVA0-003 Exam as PDF & Practice Test Engine

During a service outage, you must ensure all current tokens and leases are copied to another Vault cluster for failover so applications don't need to authenticate. How can you accomplish this?

You want to generate a token with a TTL of 24 hours which can be renewed indefinitely.
Which flag would you use on the following command?
vault token create

Christy has created a token and needs to use that token to access Vault. What command can she use to authenticate and access secrets stored in Vault?
$ vault token create -policy=christy
Key Value
--- -----
token hvs.hxDIPd8RPVtxu4AzSGS1lArP
token_accessor AxwxpDs6LbdFQbWGmBDnwIK3
token_duration 24h
token_renewable true
token_policies [ " christy " " default " ]
identity_policies []
policies [ " christy " " default " ]

You are planning to deploy a new Vault cluster for your organization and notice that Vault supports a wide variety of storage backends. You need high availability since you will have multiple applications relying on the Vault service. When building your cluster, can you choose any of the available storage backends?

Sara uses the Vault CLI for administrative tasks on the production cluster. However, she encounters permission-denied errors when making changes and needs to check which policies are attached to her token to view and adjust permissions. What command can she run on the Vault node to see the attached policies?

Tommy has written an AWS Lambda function that will perform certain tasks for the organization when data has been uploaded to an S3 bucket. Security policies for the organization do not allow Tommy to hardcode any type of credential within the Lambda code or environment variables. However, Tommy needs to retrieve a credential from Vault to write data to an on-premises database. What auth method should Tommy use in Vault to meet the requirements while not violating security policies?

When generating a dynamic secret, what value is returned that a user can use to renew or revoke the lease?

Which of the following features in Vault will replicate service tokens between clusters?

You have enabled the database secrets engine at the database/ path and created the readonly role. You run vault read, and the output shown in the exhibit is returned.
Which command renews the given lease?
Exhibit:
$ vault read database/creds/readonly
lease_id database/creds/readonly/fyF5xDomnKeCHNZNQgStwBKD
lease_duration 1h
lease_renewable true
password Ala-ckirtymYaXACplHn
username v-token-readonly-6iRIcGv8tLpu816oblPY-1556567086

A user logs into Vault through a configured LDAP auth method and notices that re-authentication is needed after every 8 hours.
Why would the user be required to log in again every 8 hours?

You are considering using HCP Vault Dedicated but are concerned about differences between a hosted version and a self-hosted deployment. Which of the following statements is true about HCP Vault Dedicated?