[Dec-2022] VA-002-P Exam Dumps, VA-002-P Practice Test Questions [Q35-Q51]

QUESTION 35
True or False? Each Terraform workspace uses its own state file to manage the infrastructure associated with that particular workspace.

False

True

QUESTION 36
Vault configuration files can be written in what languages? (select two)

XML

JSON

YAML

HCL

QUESTION 37
In order to extend Vault beyond a data center or cloud regional boundary, what feature should be used?

plugins

secrets engine

replication

seal/unseal

snapshots

QUESTION 38
True or False: When encrypting data with the transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

False

True

QUESTION 39
Why is it a good idea to declare the required version of a provider in a Terraform configuration file?
1. terraform {
2. required_providers {
3. aws = “~> 1.0”
4. }
5. }

to remove older versions of the provider

to ensure that the provider version matches the version of Terraform you are using

providers are released on a separate schedule from Terraform itself; therefore a newer version could introduce breaking changes

to match the version number of your application being deployed via Terraform

QUESTION 40
Which of the following Vault features is available only in the Enterprise version? (select three)

MFA

dynamic credentials

cloud auto unseal

replication

auto unseal with HSM

QUESTION 41
What is the default method of authentication after first initializing Vault?

GitHub

AppRole

Admin account

Tokens

Userpass

TLS certificates

QUESTION 42
In order to make a Terraform configuration file dynamic and/or reusable, static values should be converted to use what?

regular expressions

module

input parameters

output value

QUESTION 43
After encrypting data using the transit secrets engine, you’ve received the following output. Which of the following is true based upon the output?
1. Key Value
2. — —–
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

the original encryption key has been rotated at least once

this is the second version of the encrypted data

similar to the KV secrets engine, the transit secrets engine was enabled using the transit v2 option

the data is stored in Vault using a KV v2 secrets engine

QUESTION 44
In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?

20

50

5

10

QUESTION 45
In terraform, most resource dependencies are handled automatically. Which of the following statements describes best how terraform resource dependencies are handled?

The terraform binary contains a built-in reference map of all defined Terraform resource dependencies. Updates to this dependency map are reflected in terraform versions. To ensure you are working with the latest resource dependency map you much be running the latest version of Terraform.

Terraform analyses any expressions within a resource block to find references to other objects and treats those references as implicit ordering requirements when creating, updating, or destroying resources.

Resource dependencies are identified and maintained in a file called resource. dependencies. Each terraform provider is required to maintain a list of all resource dependencies for the provider and it’s included with the plugin during initialization when terraform init is executed. The file is located in the terraform.d folder.

Resource dependencies are handled automatically by the depends_on meta_argument, which is set to true by default.

QUESTION 46
From the code below, identify the implicit dependency:
1. resource “aws_eip” “public_ip” {
2. vpc = true
3. instance = aws_instance.web_server.id
4. }
5. resource “aws_instance” “web_server” {
6. ami = “ami-2757f631”
7. instance_type = “t2.micro”
8. depends_on = [aws_s3_bucket.company_data]
9. }

The EC2 instance labeled web_server

The EIP with an id of ami-2757f631

The AMI used for the EC2 instance

The S3 bucket labeled company_data

QUESTION 47
Which is not a capability that can be used when writing a Vault policy?

read

list

delete

create

modify

update

QUESTION 48
The Terraform language supports a number of different syntaxes for comments. Select all that are supported. (select three)

#

/* and */

<* and *>

//

QUESTION 49
Anyone can publish and share modules on the Terraform Public Module Registry, and meeting the requirements for publishing a module is extremely easy. Select from the following list all valid requirements. (select three)

The registry uses tags to identify module versions. Release tag names must be for the format x.y.z, and can optionally be prefixed with a v.

Module repositories must use this three-part name format, terraform-<PROVIDER>-<NAME>.

The module must be PCI/HIPPA compliant.

The module must be on GitHub and must be a public repo

QUESTION 50
Which of the following Vault policies will allow a Vault client to read a secret stored at secrets/applications/app01/api_key?

path “secrets/applications/+/api_*” {
capabilities = [“read”]
}

path “secrets/applications/” {
capabilities = [“read”]
allowed_parameters = {
“certificate” = []
}
}

path “secrets/*” {
capabilities = [“list”]
}

path “secrets/applications/app01/api_key” {
capabilities = [“update”, “list”]
}

QUESTION 51
What happens to child tokens when a parent token is revoked?

the child tokens are renewed

the child tokens are converted to parent tokens