- Home
- HashiCorp
- HashiCorp Certified: Vault Associate Exam
- HashiCorp.VA-002-P.v2023-08-09.q71
- Question 20
Valid VA-002-P Dumps shared by ExamDiscuss.com for Helping Passing VA-002-P Exam! ExamDiscuss.com now offer the newest VA-002-P exam dumps, the ExamDiscuss.com VA-002-P exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com VA-002-P dumps with Test Engine here:
Access VA-002-P Dumps Premium Version
(202 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 20/71
What type of policy is shown below?
1. key_prefix "vault/" {
2. policy = "write"
3. }
4. node_prefix "" {
5. policy = "write"
6. }
7. service "vault" {
8. policy = "write"
9. }
10. agent_prefix "" {
11. policy = "write"
12. }
13. session_prefix "" {
14. policy = "write"
15. }
1. key_prefix "vault/" {
2. policy = "write"
3. }
4. node_prefix "" {
5. policy = "write"
6. }
7. service "vault" {
8. policy = "write"
9. }
10. agent_prefix "" {
11. policy = "write"
12. }
13. session_prefix "" {
14. policy = "write"
15. }
Correct Answer: B
If using ACLs in Consul, you'll need appropriate permissions. For Consul 0.8, these policies will work for most use-cases, assuming that your service name is vault and the prefix being used is vault/Consul ACLs should always be enabled when using Consul as a storage backend. This policy allows Vault to communicate to the required services hosted on Consul.
Reference link:- https://www.vaultproject.io/docs/configuration/storage/consul
Reference link:- https://www.vaultproject.io/docs/configuration/storage/consul
- Question List (71q)
- Question 1: Which of the following cloud providers are not supported by ...
- Question 2: After executing a terraform apply, you notice that a resourc...
- Question 3: After decrypting data using the transit secrets engine, the ...
- Question 4: In order to reduce the time it takes to provision resources,...
- Question 5: After encrypting data using the transit secrets engine, you'...
- Question 6: After running into issues with Terraform, you need to enable...
- Question 7: Select the policies below that permit you to create a new en...
- Question 8: Which statements best describes what the local variable assi...
- Question 9: What does the command terraform fmt do?...
- Question 10: After a client has authenticated, what security feature is u...
- Question 11: Select the most accurate statement to describe the Terraform...
- Question 12: What is the default method of authentication after first ini...
- Question 13: True or False: Similar to how Vault works with databases and...
- Question 14: What is the proper command to enable the AWS secrets engine ...
- Question 15: Which of the following best describes the default local back...
- Question 16: When Vault is sealed, which are the only two options availab...
- Question 17: Select all Operating Systems that Terraform is available for...
- Question 18: In the example below, the depends_on argument creates what t...
- Question 19: When using parent/child modules to deploy infrastructure, ho...
- Question 20: What type of policy is shown below? 1. key_prefix "vault/" {...
- Question 21: When using providers that require the retrieval of data, suc...
- Question 22: If a client is currently assigned the following policy, what...
- Question 23: What is the Consul Agent?
- Question 24: Which of the following storage backends are supported by Has...
- Question 25: Provider dependencies are created in several different ways....
- Question 26: From the options below, select the benefits of using a batch...
- Question 27: What is the purpose of using the local-exec provisioner? (se...
- Question 28: What is the purpose of using the local-exec provisioner? (se...
- Question 29: Vault does not trust the storage backend....
- Question 30: When multiple arguments with single-line values appear on co...
- Question 31: An administrator wants to create a new KV mount for individu...
- Question 32: Anyone can publish and share modules on the Terraform Public...
- Question 33: When configuring Vault replication and monitoring its status...
- Question 34: Which of the following actions are performed during a terraf...
- Question 35: In a Consul cluster, participating nodes can be only one of ...
- Question 36: Select all features which are exclusive to Terraform Enterpr...
- Question 37: A Vault client who has read access to the path secrets/apps/...
- Question 38: Which Terraform command will force a marked resource to be d...
- Question 39: By default, where does Terraform store its state file?...
- Question 40: The security barrier protects all of the following Vault com...
- Question 41: You want to use terraform import to start managing infrastru...
- Question 42: What is the result of the following Vault command? vault aut...
- Question 43: Select two answers to complete the following sentence: Befor...
- Question 44: After creating a dynamic credential on a database, the DBA a...
- Question 45: Which of the following best describes a token accessor?...
- Question 46: Vault policies are deny by default...
- Question 47: True or False? terraform init cannot automatically download ...
- Question 48: After issuing the command to delete a secret, you run a vaul...
- Question 49: What is the result of the following terraform function call?...
- Question 50: Terraform Enterprise (also referred to as pTFE) requires wha...
- Question 51: Which of the following best describes a Terraform provider?...
- Question 52: Which three interfaces can be used to access Vault? (select ...
- Question 53: True or False: Once you create a KV v1 secrets engine and pl...
- Question 54: Which TCP port does Vault use, by default, for its API and U...
- Question 55: Which flag would be used within a Terraform configuration bl...
- Question 56: Terraform-specific settings and behaviors are declared in wh...
- Question 57: While Terraform is generally written using the HashiCorp Con...
- Question 58: Given the policy below, what would the user be able to acces...
- Question 59: What command is used to renew a token, if permitted?...
- Question 60: In regards to using a K/V v2 secrets engine, select the thre...
- Question 61: What is the result of the following terraform function call?...
- Question 62: From the code below, identify the implicit dependency: 1. re...
- Question 63: True or False: Multiple providers can be declared within a s...
- Question 64: Terraform Cloud is more powerful when you integrate it with ...
- Question 65: Complete the following sentence: For the local state, the wo...
- Question 66: You've logged into the Vault CLI and attempted to enable an ...
- Question 67: Which of the following secrets engine can generate dynamic c...
- Question 68: By default, the max TTL for a token is how many days?...
- Question 69: Select the two default policies created in Vault. (select tw...
- Question 70: What system endpoint can you query to determine which node i...
- Question 71: Select the feature below that best completes the sentence: T...
