VA-002-P HashiCorp Certified: Vault Associate Free Practice Exam Questions (2025 Updated)
Prepare effectively for your HashiCorp VA-002-P HashiCorp Certified: Vault Associate certification with our extensive collection of free, high-quality practice questions. Each question is designed to mirror the actual exam format and objectives, complete with comprehensive answers and detailed explanations. Our materials are regularly updated for 2025, ensuring you have the most current resources to build confidence and succeed on your first attempt.
From the answers below, select the advantages of using Infrastructure as Code. (select four)
Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)
You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121"
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4
You are deploying Vault in a local data center, but want to be sure you have a secondary cluster in the event the primary cluster goes offline. In the secondary data center, you have applications that are running, as they are architected to run active/active. Which type of replication would be best in this scenario?
Environment variables can be used to set variables. The environment variables must be in the format "____"_
An application requires a specific key/value to be updated in order to process a batch job. The value should be either "true" or "false". However, when developers have been updating the value, sometimes they mistype the value or capitalize on the value, causing the batch job not to run. What feature of a Vault policy can be used in order to restrict the entry to the required values?
Which of the following best describes a Terraform provider?
What are the primary benefits of running Vault in a production deployment over dev server mode? (select two)
While Vault provides businesses tons of functionality out of the box, what feature allows you to extend its functionality with solutions written by third-party providers?
Vault secrets engines are used to do what with data? (select three)
You have been given requirements to create a security group for a new application. Since your organization standardizes on Terraform, you want to add this new security group with the fewest number of lines
of code. What feature could you use to iterate over a list of required tcp ports to add to the new security group?
Vault configuration files can be written in what languages? (select two)
Terraform Enterprise (also referred to as pTFE) requires what type of backend database for a clustered deployment?
After executing a terraform apply, you notice that a resource has a tilde (~) next to it. What does this infer?
Which statements best describes what the local variable assignment is doing in the following code snippet:
1. variable "subnet_details" {
2. type = list(object({
3. cidr = string
4. subnet_name = string
5. route_table_name = string
6. aznum = number
7. }))
8. }
9. locals {
10. route_tables_all = distinct([for s in var.subnet_details : s.route_table_name ])
11. }
The following is a snippet from a Terraform configuration file:
1. provider "aws" {
2. region = "us-east-1"
3. }
4. provider "aws" {
5. region = "us-west-1"
6. }
which, when validated, results in the following error:-
1. Error: Duplicate provider configuration
2.
3. on main.tf line 5:
4. 5: provider "aws" {
5.
6. A default provider configuration for "aws" was already given at
7. main.tf:1,1-15. If multiple configurations are required, set the "______"
8. argument for alternative configurations.
Fill in the blank in the error message with the correct string from the list below.
The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at aws/
After a client has authenticated, what security feature is used to make subsequent calls?
A user creates three workspaces from the command line - prod, dev, and test. Which of the following commands will the user run to switch to the dev workspace?
In order to reduce the time it takes to provision resources, Terraform uses parallelism. By default, how many resources will Terraform provision concurrently?
