Chiron Exams All exams Ask for access

All exams › HashiCorp

Vault Associate 003 practice examsIn development

HashiCorp Certified: Vault Associate

HashiCorp · intermediate · 60 minutes

In developmentThis course is still being brought to our full standard. The questions and notes are usable, but they have not yet been checked line by line against the vendor’s own training.

Secrets management with Vault: the seal and unseal model and cluster architecture, the auth methods and token types, policies and leases, static against dynamic secrets engines, and encryption as a service through Transit.

What you get

174practice questions
3full papers of 57
5course chapters · 30 minutes
100%answers explained

Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.

What the exam covers

The domains our question bank is built on. We have not yet transcribed this vendor’s own outline for this exam.

Understand Vault architecture, and seal and unseal a VaultNot published
Compare authentication methods and assess Vault tokensNot published
Create Vault policies and manage Vault leasesNot published
Choose a secret method and differentiate between secrets enginesNot published
Explain encryption as a service and utilise the Vault CLI, API and UINot published

Two sample questions

Two of the 174, with the answer and the explanation.

1. Why does a dynamic secret's lease improve security over a static one?

  1. The credential is shared across all consumers
  2. The credential never needs to be created
  3. The credential is short-lived and auto-revoked — correct
  4. The credential is stored in plain text

Why: A leaked short-lived credential is useful for far less time.

2. What does a successful login return?

  1. A token with its policies, TTL and accessor — correct
  2. The secrets the identity may read
  3. A session cookie for the user interface
  4. The policies attached to the auth method itself

Why: Everything afterwards is done with that token, and its properties are fixed at issue. The accessor allows lookup and revocation without the token value itself.

The real Vault Associate 003 exam

Length60 minutes
Questions57
Pass markNot published; HashiCorp reports pass or fail only
Price$70.50 USD
Recommended before you sit itNone. HashiCorp recommends basic familiarity with the command line and cloud concepts.
Valid for2 years

Exam facts as published by HashiCorp; always check the vendor’s page before you book.

Study Vault Associate 003 with Chiron

Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.