HashiCorp Vault-Associate-002 Exam Overview:
| Certification Vendor: | HashiCorp |
| Exam Name: | HashiCorp Certified: Vault Associate (002) |
| Exam Number: | Vault-Associate-002 |
| Available Languages: | English |
| Passing Score: | 70% |
| Real Exam Qty: | 60 |
| Related Certifications: | HashiCorp Certified: Vault Associate (003) HashiCorp Certified: Vault Operations Professional |
| Exam Duration: | 60 minutes |
| Exam Format: | Multiple Choice, Multiple Select |
| Exam Price: | USD 70.50 |
| Certificate Validity Period: | 2 years |
| Sample Questions: | HashiCorp Vault-Associate-002 Sample Questions |
| Exam Way: | Online proctored |
| Pre Condition: | Basic terminal skills, understanding of on-premises/cloud architecture, understanding of security |
| Official Syllabus URL: | https://developer.hashicorp.com/certifications/security-automation |
HashiCorp Vault-Associate-002 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Manage Vault leases | - Lease Operations
|
| Assess Vault tokens | - Token Types
|
| Explain Vault architecture | - Vault Components
|
| Utilize Vault UI | - UI Operations
|
| Compare and configure Vault secrets engines | - Secret Engine Lifecycle
|
| Create Vault policies | - Policy Management
|
| Explain encryption as a service | - Transit Secrets Engine
|
| Compare authentication methods | - Identity and Groups
|
| Utilize Vault CLI and API | - API Interaction
|
HashiCorp Certified: Vault Associate (002) Sample Questions:
1. Examine the command below. Output has been trimmed.
Which of the following statements describe the command and its output?
A) Generated token is an orphan token which can be renewed indefinitely
B) Configures the AppRole auth method with user specified role ID and secret ID
C) Generated token's TTL is 60 hours
D) Missing a default token policy
2. Use this screenshot to answer the question below:
Which statement describes this AppRole auth method configuration?
A) It is enabled at "App1" path
B) Generates batch tokens with TTL set to 5 minutes
C) Generates multiple tokens with TTL set to 5 minutes
D) It is enabled at "auth_approle_f23dd79f" path
3. You have a 2GB Base64 binary large object (blob) that needs to be encrypted. Which of the following best describes the transit secrets engine?
A) A data key encrypts the blob locally, and the same key decrypts the blob locally.
B) Vault will store the blob permanently. Be sure to run Vault on a compute optimized machine.
C) The transit engine is not a good solution for binaries of this size.
D) To process such a large blob. Vault will temporarily store it in the storage backend.
4. A child token must be assigned the same or a subset the parent token's policies.
5. You need to edit a policy, but the UI appears as shown. What is the problem?
A) Use the command shell in UI to manage policies.
B) This is an UI error. Contact support.
C) You don't have a permission to manage policies.
D) Vault UI does not support policy creation and management.
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: B | Question # 3 Answer: C | Question # 4 Answer: Only visible for members | Question # 5 Answer: C |

We're so confident of our products that we provide no hassle product exchange.


By Jonas


