HashiCorp VA-002-P 問題集

質問 1：
Which is not a capability that can be used when writing a Vault policy?
A. list
B. create
C. read
D. delete
E. modify
F. update
正解：E
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which three interfaces can be used to access Vault? (select three)
A. CLI
B. Consul
C. RPC
D. UI
E. JSON
F. API
正解：A,D,F
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which statements best describes what the local variable assignment is doing in the following code snippet:
1. variable "subnet_details" {
2. type = list(object({
3. cidr = string
4. subnet_name = string
5. route_table_name = string
6. aznum = number
7. }))
8. }
9. locals {
10. route_tables_all = distinct([for s in var.subnet_details : s.route_table_name ])
11. }
A. Create a list of route table names eliminating duplicates
B. Create a distinct list of route table name objects
C. Create a map of route table names to subnet names
D. Create a map of route table names from a list of subnet names
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which two characters can be used when writing a policy to reflect a wildcard or path segment? (select two)
A. &
B. $
C. @
D. +
E. *
正解：D,E
解説: (Topexam メンバーにのみ表示されます)

質問 5：
What is the default method of authentication after first initializing Vault?
A. Userpass
B. TLS certificates
C. Tokens
D. Admin account
E. GitHub
F. AppRole
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following actions are performed during a terraform init? (select three)
A. initializes downloaded and/or installed providers
B. download the declared providers which are supported by HashiCorp
C. provisions the declared resources in your configuration
D. initializes the backend configuration
正解：A,B,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
To prepare for day-to-day operations, the root token should be safety saved outside of Vault in order to administer Vault
A. False
B. True
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
When administering Vault on a day-to-day basis, why is logging in with the root token, as shown below, a bad idea? (select two).

A. the root token should be revoked and not used on a day-to-day basis
B. It's easier to just use the root token than to configure additional auth methods
C. the root token isn't a secure way of logging into Vault
D. the root token is attached to the root policy, which likely provides too many privileges to a user
正解：A,D
解説: (Topexam メンバーにのみ表示されます)