20. What is the purpose of a Vault replication setup?
To ensure high availability and disaster recovery
To create multiple secret engines
To encrypt stored secrets
To manage Vault user authentication
✅ Correct Answer: To ensure high availability and disaster recovery
21. What is the purpose of Vault's cubbyhole?
To store temporary secrets tied to a token's lifecycle
To cache frequently accessed secrets
To encrypt transit data
To manage authentication tokens
✅ Correct Answer: To store temporary secrets tied to a token's lifecycle
22. Which Vault command is used to enable a secrets engine?
vault secrets enable
vault engine enable
vault enable secrets
vault add engine
✅ Correct Answer: vault secrets enable
23. What is the purpose of Vault's response wrapping?
To securely deliver secrets to clients
To encrypt audit logs
To compress secret data
To authenticate API requests
✅ Correct Answer: To securely deliver secrets to clients
24. Which of these is NOT a Vault authentication method?
OIDC
JWT
S3
Azure
✅ Correct Answer: S3
25. What does Vault's PKI secrets engine provide?
Dynamic X.509 certificates
SSH key management
Password rotation
Cloud IAM credentials
✅ Correct Answer: Dynamic X.509 certificates
26. Which command lists enabled secrets engines?
vault secrets list
vault list engines
vault engines
vault list secrets
✅ Correct Answer: vault secrets list
27. What is the purpose of Vault's barrier?
To encrypt all data before storage
To prevent unauthorized API access
To isolate network traffic
To authenticate users
✅ Correct Answer: To encrypt all data before storage
28. Which Vault feature allows automatic rotation of secrets?
Dynamic Secrets
Static Secrets
Transit Engine
Cubbyhole
✅ Correct Answer: Dynamic Secrets
29. What is the purpose of Vault's root token?
Initial superuser access with unlimited privileges
To encrypt the storage backend
To authenticate the Vault service
To seal the Vault
✅ Correct Answer: Initial superuser access with unlimited privileges
30. Which command checks the status of a Vault server?
vault status
vault health
vault info
vault check
✅ Correct Answer: vault status
31. What is Vault's KV secrets engine used for?
Storing key-value secrets
Managing encryption keys
Rotating database passwords
Generating SSH certificates
✅ Correct Answer: Storing key-value secrets
32. Which Vault replication mode provides read-only copies?
Performance Replication
Disaster Recovery Replication
Active-Active Replication
Standby Replication
✅ Correct Answer: Performance Replication
33. What is the purpose of Vault's step-down command?
To transition from active to standby
To restart the Vault service
To reduce memory usage
To disable authentication
✅ Correct Answer: To transition from active to standby
34. Which Vault feature provides encryption-as-a-service?
Transit Secrets Engine
KV Secrets Engine
PKI Secrets Engine
AWS Secrets Engine
✅ Correct Answer: Transit Secrets Engine
35. What is the purpose of Vault's agent?
To automate client-side operations
To monitor Vault performance
To replicate secrets
To authenticate servers
✅ Correct Answer: To automate client-side operations
36. Which command is used to renew a Vault token?
vault token renew
vault renew token
vault extend token
vault refresh token
✅ Correct Answer: vault token renew
37. What is the purpose of Vault's namespace feature?
To provide isolated environments within a Vault installation
To categorize secrets
To organize audit logs
To separate authentication methods
✅ Correct Answer: To provide isolated environments within a Vault installation
38. Which Vault command is used to view policy rules?
vault policy read
vault read policy
vault show policy
vault get policy
✅ Correct Answer: vault policy read
39. What is the purpose of Vault's seal?
To make the Vault inaccessible and encrypted
To stop the Vault service
To revoke all tokens
To disable authentication
✅ Correct Answer: To make the Vault inaccessible and encrypted
40. Which Vault feature allows generating AWS IAM credentials?
AWS Secrets Engine
Cloud Secrets Engine
IAM Secrets Engine
Dynamic Credentials Engine
✅ Correct Answer: AWS Secrets Engine
41. What is the purpose of Vault's token hierarchy?
To enable token creation with limited permissions
To organize tokens by expiration time
To categorize tokens by authentication method
To encrypt token storage
✅ Correct Answer: To enable token creation with limited permissions
42. Which command is used to configure Vault's audit devices?
vault audit enable
vault enable audit
vault config audit
vault add audit
✅ Correct Answer: vault audit enable
43. What is the purpose of Vault's Shamir's Secret Sharing?
To split the master key into multiple parts
To encrypt secrets in transit
To authenticate cluster members
To replicate secrets
✅ Correct Answer: To split the master key into multiple parts
44. Which Vault feature provides SSH certificate management?
SSH Secrets Engine
PKI Secrets Engine
Transit Secrets Engine
Cert Secrets Engine
✅ Correct Answer: SSH Secrets Engine
45. What is the purpose of Vault's rekey operation?
To change the master key shares
To rotate encryption keys
To renew all tokens
To reset authentication methods
✅ Correct Answer: To change the master key shares
46. Which command is used to view Vault's server configuration?
vault read sys/config/state
vault config show
vault get config
vault server info
✅ Correct Answer: vault read sys/config/state
47. What is the purpose of Vault's response wrapping TTL?
To set a time limit for retrieving wrapped secrets
To control token expiration
To limit lease durations
To schedule secret rotation
✅ Correct Answer: To set a time limit for retrieving wrapped secrets
48. Which Vault feature provides database credential rotation?
Database Secrets Engine
Dynamic Secrets Engine
Credential Manager
Rotation Secrets Engine
✅ Correct Answer: Database Secrets Engine
49. What is the purpose of Vault's seal threshold?
The minimum number of unseal keys required
The maximum time before auto-sealing
The number of failed attempts before sealing
The minimum server resources required
✅ Correct Answer: The minimum number of unseal keys required
50. Which command is used to generate a root token?
vault operator generate-root
vault token create root
vault generate root-token
vault create root
✅ Correct Answer: vault operator generate-root
51. What is the purpose of Vault's plugin system?
To extend Vault's functionality with custom components
To manage UI extensions
To authenticate plugins
To encrypt plugin communications
✅ Correct Answer: To extend Vault's functionality with custom components
52. Which Vault feature provides Active Directory integration?
AD Secrets Engine
LDAP Authentication
Windows Secrets Engine
Domain Controller Integration
✅ Correct Answer: AD Secrets Engine
53. What is the purpose of Vault's recovery keys?
To recover from a seal when unseal keys are lost
To restore deleted secrets
To recover expired tokens
To decrypt backup files
✅ Correct Answer: To recover from a seal when unseal keys are lost
54. Which command is used to view Vault's license?
vault read sys/license
vault license show
vault get license
vault show license
✅ Correct Answer: vault read sys/license
55. What is the purpose of Vault's quotas?
To limit resource usage
To restrict secret access
To control authentication attempts
To manage storage capacity
✅ Correct Answer: To limit resource usage
56. Which Vault feature provides Azure cloud integration?
Azure Secrets Engine
Cloud Secrets Engine
Microsoft Authentication
Dynamic Azure Credentials
✅ Correct Answer: Azure Secrets Engine
57. What is the purpose of Vault's HA storage backend?
To support clustered deployments
To encrypt stored data
To replicate secrets
To authenticate cluster members
✅ Correct Answer: To support clustered deployments
58. Which command is used to check Vault's seal status?
vault status
vault seal status
vault check seal
vault get seal
✅ Correct Answer: vault status
59. What is the purpose of Vault's control groups?
To require multiple approvals for sensitive operations
To organize policies
To manage authentication methods
To control replication
✅ Correct Answer: To require multiple approvals for sensitive operations
60. Which Vault feature provides Google Cloud integration?
GCP Secrets Engine
Cloud Secrets Engine
Google Authentication
Dynamic GCP Credentials
✅ Correct Answer: GCP Secrets Engine
The Terraform Hashicorp Hcvao 002 certification is a globally recognized credential for IT professionals.
This practice test helps you prepare by covering key topics like hardware, networking, troubleshooting, and security.
Want more practice? Check out our other mock exams: