HCVA0-003 Secrets Practice Questions

What API endpoint is used to manage secrets engines in Vault?

• AA. /secret-engines/
• BB. /sys/mounts
• CC. /sys/capabilities
• DD. /sys/kv

Select the policies below that permit you to create a new entry of environment=prod at the path /secrets/apps/my_secret (select three).

Select 3 answers.

• AA. path "secrets/+/my_secret" { capabilities = ["create"] allowed_parameters = { "*" = [] } }
• BB. path "secrets/apps/my_secret" { capabilities = ["update"] }
• CC. path "secrets/apps/my_secret" { capabilities = ["create"] allowed_parameters = { "environment" = [] } }
• DD. path "secrets/apps/*" { capabilities = ["create"] allowed_parameters = { "environment" = ["dev", "test", "qa", "prod"] } }

Which of the following secrets engines does NOT issue a lease upon a read request?

• AA. KV
• BB. Consul
• CC. Database
• DD. AWS