VA-002-P exam

}A . The EC2 instance labeled web_serverB . The EIP with an id of ami-2757f631C . The AMI used for the EC2 instanceD . The S3 bucket labeled company_dataView AnswerAnswer: A Explanation: The EC2 instance labeled web_server is the implicit dependency as the aws_eip cannot be created until the aws_instance...

Which of the following unseal options can automatically unseal Vault upon the start of the Vault service? (select four)A . TransitB . HSMC . AWS KMSD . Key ShardsE . Azure KMSView AnswerAnswer: A,B,C,E Explanation: When a Vault server is started, it starts in a sealed state and it does...

Which of the following secrets engine can generate dynamic credentials? (select three)A . AzureB . databaseC . key/valueD . TransitE . AWSView AnswerAnswer: A,B,E Explanation: Vault has many secrets engines that can generate dynamic credentials, including AWS, Azure, and database secrets engines. The key/value secret engine is used to store...

}A . The EC2 instance labeled web_serverB . The EIP with an id of ami-2757f631C . The AMI used for the EC2 instanceD . The S3 bucket labeled company_dataView AnswerAnswer: A Explanation: The EC2 instance labeled web_server is the implicit dependency as the aws_eip cannot be created until the aws_instance...

}A . "db"B . resourceC . "aws_instance"D . instance_typeView AnswerAnswer: B Explanation: The format of resource block configurations is as follows: <block type> "<resource type>" "<local name/label>"

After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?A . the resource will be destroyed and recreatedB . the resource will be createdC . Terraform can't determine how to proceed due to a problem with the state fileD...

}A . anything they want to within VaultB . ability to enable a secret engine at the path *C . only make changes to policiesD . nothing, since the policy doesn't specify any specific pathsView AnswerAnswer: A Explanation: All interactions with Vault are done through its pathing structure. If you...

True or False? terraform init cannot automatically download Community providers.A . FalseB . TrueView AnswerAnswer: B Explanation: Anyone can develop and distribute their own Terraform providers. (See Writing Custom Providers for more about provider development.) These third-party providers must be manually installed, since terraform init cannot automatically download them. https://www.terraform.io/docs/configuration/providers.html#third-party-plugins

After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?A . the resource will be destroyed and recreatedB . the resource will be createdC . Terraform can't determine how to proceed due to a problem with the state fileD...

http://127.0.0.1:8200/v1/sys/tools/random/164A . a random string of 164 charactersB . a random token valid for 164 usesC . NoneD . a secured secret based on 164 bytes of dataView AnswerAnswer: A Explanation: This endpoint returns high-quality random bytes of the specified length.