Vault-Associate Exam Questions and Answers

QUESTION: 21

After a client has authenticated, what security feature is used to make subsequent calls?

key shard
ldap
pgp
token
listener
path

Answer(s): D

Explanation:

After authenticating, a client is issued a security token which is associated with a policy. That token is used to make a subsequent request to Vault, such as read, write, etc.

Reveal Solution Next Question

QUESTION: 22

Select the two default policies created in Vault. (select two)

default
vault
base
root
admin
user

Answer(s): A,D

Explanation:

Vault creates two default policies; root, and default.
The root policy cannot be deleted or modified.
The default policy is attached to all tokens, by default, however, this action can be modified if needed.

Reveal Solution Next Question

QUESTION: 23

Which three interfaces can be used to access Vault? (select three)

JSON
CLI
RPC
UI
API
Consul

Answer(s): B,D,E

Explanation:

Vault has three interfaces available.
The API can be used by a user or application, the CLI can be used by a user directly on the Vault server or remotely, and the UI can be used if it's been enabled in the configuration file.

Reveal Solution Next Question

QUESTION: 24

Vault secrets engines are used to do what with data? (select three)

copy
generate
store
transmit
encrypt

Answer(s): B,C,E

Explanation:

Vault secrets engines are used to store, generate, or encrypt data. The KV secrets engine can store data, AWS can generate credentials, and the transit secret engine can encrypt data.

Reveal Solution Next Question

QUESTION: 25

Which commands are available only after Vault has been unsealed? (select two)

vault login -method=ldap -username=vault
vault operator unseal
vault kv get kv/apps/app01
vault status

Answer(s): A,C

Explanation:

Once Vault is unsealed, you can run vault login -method=ldap -username=vault and vault kv get kv/apps/app01. The second command assumes that you have authenticated but it cannot be run unless Vault is unsealed. vault status can be run regardless of Vault is sealed or unsealed, and vault
operator unseal can only be run when the vault is sealed.

Reveal Solution Next Question

HashiCorp Vault-Associate Exam (page: 5) HashiCorp Certified: Vault Associate (002) Updated on: 25-Dec-2025

QUESTION: 21

Explanation:

QUESTION: 22

Explanation:

QUESTION: 23

Explanation:

QUESTION: 24

Explanation:

QUESTION: 25

Explanation:

HashiCorp Vault-Associate Exam (page: 5)
HashiCorp Certified: Vault Associate (002)
Updated on: 25-Dec-2025