VA-002-P Online Practice Questions and Answers

Vault policies are deny by default

A. TRUE

B. FALSE

In order to extend a Consul storage backend, Consul nodes should be provisioned across multiple data centers or cloud regions.

A. True

B. False

Your organization is running Vault open source and has decided it wants to use the Identity secrets engine. You log into Vault but are unable to find it in the list to enable. What gives?

A. because you are running open-source and the identity secrets engine is an Enterprise feature, it is not available to enable.

B. the identity secrets engine was deprecated in previous versions

C. this secrets engine will be mounted by default.

D. the policy attached to your user doesn't allow access to the Identity secrets engine.

Which of the following is not an activity associated with the Vault transit secrets engine?

A. encrypt

B. decrypt

C. update

D. rewrap

When configuring Vault replication and monitoring its status, you keep seeing something called 'WALs'. What are WALs?

A. wake after lan

B. warning of allocated logs

C. write-ahead log

D. write along logging

Which Terraform command will force a marked resource to be destroyed and recreated on the next apply?

A. terraform fmt

B. terraform destroy

C. terraform taint

D. terraform refresh

You want to use terraform import to start managing infrastructure that was not originally provisioned through infrastructure as code. Before you can import the resource's current state, what must you do in order to prepare to manage these resources using Terraform?

A. run terraform refresh to ensure that the state file has the latest information for existing resources.

B. update the configuration file to include the new resources

C. modify the Terraform state file to add the new resources

D. shut down or stop using the resources being imported so no changes are inadvertently missed

Select the most accurate statement to describe the Terraform language from the following list.

A. Terraform is an immutable, declarative, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally JSON.

B. Terraform is a mutable, declarative, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.

C. Terraform is an immutable, procedural, Infrastructure as Code configuration management language based on Hashicorp Configuration Language, or optionally JSON.

D. Terraform is a mutable, procedural, Infrastructure as Code provisioning language based on Hashicorp Configuration Language, or optionally YAML.

True or False:

The terraform refresh command is used to reconcile the state Terraform knows about (via its state file) with

the real-world infrastructure. If the drift is detected between the real-world infrastructure and the last

known-state, it will modify the infrastructure to correct the drift.

A. False

B. True

Which of the following statements best describes the Terraform list(...) type?

A. a collection of unique values that do not have any secondary identifiers or ordering.

B. a collection of values where each is identified by a string label.

C. a sequence of values identified by consecutive whole numbers starting with zero.

D. a collection of named attributes that each have their own type.