HCVA0-003 무료 덤프문제 온라인 액세스

After creating a dynamic credential on a database, the DBA accidentally deletes the credentials on the database itself. When attempting to remove the lease, Vault returns an error stating that the credential cannot be found. What command can be run to make Vault remove the secret?

• A.vault revoke -apply
• B.vault lease -renew
• C.vault lease revoke -force -prefix <lease_path>
• D.vault lease revoke -enforce

What API endpoint is used to enable and configure a secrets engine?

• A./v1/sys/config
• B./v1/sys/plugins/catalog
• C./v1/sys/init
• D./v1/sys/mounts

All Vault instances, or clusters, include two built-in policies that are created automatically. Choose the two policies below and the correct information regarding each policy. (Select two)

• A.The default policy is created automatically. This policy can be modified but not deleted
• B.The root policy is created automatically. This policy provides superuser privileges and cannot be deleted
• C.The admin policy is created automatically. It provides administrative permissions but can be deleted if needed
• D.The default policy is created automatically. This policy cannot be modified but it can be deleted

Which of the following describes the Vault's auth method component?

• A.It is responsible for durable storage of client tokens
• B.It dynamically generates a unique set of secrets with appropriate permissions attached
• C.It verifies a client against an internal or external system, and generates a token with the appropriate policies attached
• D.It verifies a client against an internal or external system, and generates a token with root policy

You are using Vault CLI and enable the database secrets engine on the default path of database/. However, the DevOps team wants to enable another database secrets engine for testing but receives an error stating the path is already in use. How can you enable a second database secrets engine using the CLI?

• A.vault secrets enable database database2/
• B.vault secrets enable -force database
• C.vault secrets enable -path=database2 database
• D.vault secrets enable database2/