VA-002-P

True or False: Multiple providers can be declared within a single Terraform configuration file.A . FalseB . TrueView AnswerAnswer: B Explanation: Multiple provider blocks can exist if a Terraform configuration is composed of multiple providers, which is a common situation. To add multiple providers in your configuration, declare the providers,...

A Vault client who has read access to the path secrets/apps/app1 is having trouble viewing the secret in the user interface (UI) but can access via the API. What can be done to resolve this issue?A . add read permissions to the path secrets/appsB . modify the policy to allow...

After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?A . the resource will be destroyed and recreatedB . the resource will be createdC . Terraform can't determine how to proceed due to a problem with the state fileD...

What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)A . ability to enable auth methodsB . persistent storageC . encryption via TLSD . faster deploymentE . access to all of the secret enginesView AnswerAnswer: B,C Explanation: Dev server mode stores its...

After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?A . the resource will be destroyed and recreatedB . the resource will be createdC . Terraform can't determine how to proceed due to a problem with the state fileD...

True or False: You can migrate the Terraform backend but only if there are no resources currently being managed.A . FalseB . TrueView AnswerAnswer: A Explanation: If you are already using Terraform to manage infrastructure, you probably want to transfer to another backend, such as Terraform Cloud, so you can...

You've set up multiple Vault clusters, one on-premises which is intended to be the primary cluster, and the second cluster in AWS, which was deployed to be used for performance replication. After enabling replication, developers complain that all the data they've stored in the AWS Vault cluster is missing. What...

Which is not a capability that can be used when writing a Vault policy?A . readB . listC . deleteD . createE . modifyF . updateView AnswerAnswer: E Explanation: When writing a Vault policy, permissions which can be applied to paths include create, read, update, delete, list, deny, and sudo....

You've set up multiple Vault clusters, one on-premises which is intended to be the primary cluster, and the second cluster in AWS, which was deployed to be used for performance replication. After enabling replication, developers complain that all the data they've stored in the AWS Vault cluster is missing. What...

}A . anything they want to within VaultB . ability to enable a secret engine at the path *C . only make changes to policiesD . nothing, since the policy doesn't specify any specific pathsView AnswerAnswer: A Explanation: All interactions with Vault are done through its pathing structure. If you...