Hashicorp HCVA0-003 Practice Questions

The latest changes and updates from the administration for this exam.

verified

Latest Update: May 18 2026

All questions are working fine.

All Questions (228)bookmarkBookmarked (0)

All228Show all accessible questions in this exam.Missed228Questions you haven't attempted yet.Incorrect0Questions you answered incorrectly on your last attempt.

Question 21

Which of the following are supported auth methods for Vault? (select four)

Question 22

Although batch and service tokens share many characteristics, which of the following are true only about batch tokens? (select three)

Select all that apply

are renewable up until the max TTL

they are not persisted to disk

maintains a single fixed TTL

can create child tokens

they are valid for either the primary or any secondary clusters

Question 23

Hanna is working with Vault and has been assigned a namespace called integration, which is where she stores all of her secrets. Hanna configures her application to use the following API request, but the request is failing. What changes below will help Hanna properly retrieve the secret?

Select all that apply

$ curl \

--header "X-Vault-Token:s.lzrmRe5Y3LMcDRmOttEjWoag" \

--header "X-Vault-Namespace:integration" \

--request GET \

https://vault.example.com:8200/v1/secret/data/my-secret

$ curl \

--header "X-Vault-Token:s.lzrmRe5Y3LMcDRmOttEjWoag" \

--request GET \

https://vault.example.com:8200/v1/integration/secret/data/my-secret

$ curl \

--header "X-Vault-Token:s.lzrmRe5Y3LMcDRmOttEjWoag" \

--request GET \

--namespace "integration"

https://vault.example.com:8200/v1/secret/data/my-secret

$ curl \

--header "X-Vault-Token:s.lzrmRe5Y3LMcDRmOttEjWoag" \

--request GET\integration \

https://vault.example.com:8200/v1/secret/data/my-secret

Question 24

Based on the screenshot below, what auth method is being used to authenticate to Vault?

AppRole

userpass

LDAP

OIDC

Question 25

You have multiple Kubernetes pods that need frequent access to Vault to retrieve credentials for establishing connectivity to a backend database. You enable the Kubernetes auth method in Vault. What resource do you need to create within Kubernetes to complete this configuration?

a Vault token for authentication

k8s service account token

an AppRole role_id and secret_id

username and password for kubectl

Question 26

True or False? After the lease has expired for a dynamic secret, Vault revokes the credentials on the backend platform for which they were created (i.e., database, AWS, Consul)

True

False

Question 27

What is the default TTL for tokens in Vault if one is not specified?

15 minutes

768 hours (32 days)

24 hours (1 day)

60 minutes (1h)

Question 28

Complete the sentence: Unsealing Vault is the process of ___________________________.

creating the unseal or recovery keys

reconstructing the master key

decrypting the Vault data

exporting the encryption key

Question 29

True or False? To encrypt existing encrypted data with the latest version of the encryption key, you need to first decrypt it and then request Vault to re-encrypt it with the latest version of the encryption key.

True

False

Question 30

What Vault feature can be used to locally cache secrets for an application and reduce the number of requests sent to Vault?

envconsul

Vault agent

SSH secrets engine

consul-template

Update History

Update History