Skip to main content
DevOps ⭐ Premium

HashiCorp Certified: Vault Operations Professional - 340 Questions

By Webmaster Certland ❤️ 0 likes

Practice exam for the HashiCorp Certified Vault Operations Professional certification. Covers Vault server configuration, monitoring, security model, HA and fault tolerance, HSM integration, performance scaling, access control, and Vault Agent.

🔒

Premium Content

This exam is exclusive to Premium users. Upgrade to get unlimited access!

Become Premium

👁️ Free Preview (5 of 340 questions)

1. A team is setting up Vault for the first time on a production Linux server. Which file format is used for the Vault server configuration?

A YAML (.yaml)
B HCL (.hcl) or JSON (.json)
C TOML (.toml)
D XML (.xml)

2. An operator needs to enable the KV v2 secrets engine at the path `secret/` during Vault server setup. Which command accomplishes this?

A vault secrets enable -path=secret kv-v2
B vault mount secret kv-v2
C vault secrets create -path=secret -type=kv-v2
D vault kv enable secret --version=2

3. A Vault operator needs to enable the AppRole authentication method for machine-to-machine authentication. Which command enables it?

A vault enable auth approle
B vault auth create approle
C vault auth enable approle
D vault auth mount -type=approle

4. A company is configuring a Vault server for production. The security team requires that the UI be disabled to reduce the attack surface. Which configuration setting achieves this?

A Set disable_ui = true in the Vault configuration file
B Set ui = false in the Vault configuration file
C Set web_interface = disabled in the listener stanza
D Remove the ui stanza entirely from the configuration file

5. During a Vault production hardening review, a security engineer notices the server configuration has `tls_disable = 1`. What is the security implication and what should be done?

A All API traffic is plaintext; production hardening requires enabling TLS with valid certificates
B It is acceptable in production if the server is behind a TLS-terminating load balancer
C It disables TLS only for external clients; internal cluster traffic remains encrypted
D It enables mutual TLS, requiring all clients to present certificates

Want to test yourself for real?

Create a free account and run our exam simulation engine.

Free No credit card
  • Simulation engine
  • Up to 10 questions per attempt
  • Score & basic stats
Create free account Already have an account? Sign in
Best
Premium 7-day trial
  • All 340 questions
  • Detailed explanations
  • Smart Practice + Focus Mode
⭐ Start 7-day free trial

Related Exams

Discussion

No comments yet. Be the first to start the discussion!

Sign in to join the discussion.