HCVA0-003 무료 덤프문제 온라인 액세스

You have TBs of data encrypted by Vault stored in a database and are worried about Vault becoming unavailable and not being able to decrypt the data. Is it possible to export the encryption key to store it somewhere else in the event Vault becomes unavailable?

• A.No, you cannot export the encryption key from Vault
• B.Yes, as long as the key was configured to be exportable when it was created

The Key/Value (KV) secrets engine is an example of a dynamic secrets engine.

• A.False
• B.True

You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?

• A.VAULT_CAPATH
• B.VAULT_ADDR
• C.VAULT_CLUSTER_ADDR
• D.VAULT_REDIRECT_ADDR

After decrypting data using the Transit secrets engine, the plaintext output does not match the plaintext credit card number that you encrypted. Which of the following answers provides a solution?
$ vault write transit/decrypt/creditcard ciphertext= " vault:v1:cZNHVx+sxdMEr....... " Key: plaintext Value: Y3JlZGl0LWNhcmQtbnVtYmVyCg==

• A.The user doesn't have permission to decrypt the data, therefore Vault returns false data
• B.The data is corrupted. Execute the encryption command again using a different data key
• C.Vault is sealed, therefore the data cannot be decrypted. Unseal Vault to properly decrypt the data
• D.The resulting plaintext data is base64-encoded. To reveal the original plaintext, use the base64 --decode command

Which of the following is a reason to rekey a Vault cluster?
Pick the 2 correct responses below.

• A.A keyholder joins or leaves the organization.
• B.A compliance policy mandates rotating the root key at a regular interval.
• C.Upgrading Vault Community Edition to Vault Enterprise.
• D.Additional Vault nodes are added to a cluster.
• E.The root token is lost.