NO.45 From the code below, identify the implicit dependency:
1. resource “aws_eip” “public_ip” {
2. vpc = true
3. instance = aws_instance.web_server.id
4. }
5. resource “aws_instance” “web_server” {
6. ami = “ami-2757f631”
7. instance_type = “t2.micro”
8. depends_on = [aws_s3_bucket.company_data]
9. }

NO.46 When creating a dynamic secret in Vault, Vault returns what value that can be used to renew or revoke the lease?

NO.47 Which of the following Terraform files should be ignored by Git when committing code to a repo? (select two)

NO.48 The following is a snippet from a Terraform configuration file:
1. provider “aws” {
2. region = “us-east-1”
3. }
4. provider “aws” {
5. region = “us-west-1”
6. }
which, when validated, results in the following error:-
1. Error: Duplicate provider configuration
2.
3. on main.tf line 5:
4. 5: provider “aws” {
5.
6. A default provider configuration for “aws” was already given at
7. main.tf:1,1-15. If multiple configurations are required, set the “______”
8. argument for alternative configurations.
Fill in the blank in the error message with the correct string from the list below.

NO.49 Which command is used to initialize Vault after first starting the Vault service?

NO.50 When registering a plugin with Vault, where would you configure the location where the binaries are located in order for Vault to properly register the plugin?

NO.51 You want to encrypt a credit card number using the transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
1. $ vault write -format=json transit/encrypt/creditcards plaintext=”1234 5678 9101 1121″
2. Error writing data to transit/encrypt/orders: Error making API request.
3.
4. URL: PUT http://10.25.16.165:8200/v1/transit/encrypt/creditcards
5. Code: 400. Errors:
6.
7. * illegal base64 data at input byte 4

NO.52 From the options below, select the benefits of using the PKI (certificates) secrets engine: (select three)

NO.53 Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

NO.54 What is the best and easiest way for Terraform to read and write secrets from HashiCorp Vault?

NO.55 Which of the following policies would permit a user to generate dynamic credentials on a database?

NO.56 What are the benefits of using Infrastructure as Code? (select five)

NO.57 After encrypting data using the transit secrets engine, you’ve received the following output. Which of the following is true based upon the output?
1. Key Value
2. — —–
3. ciphertext vault:v2:45f9zW6cglbrzCjI0yCyC6DBYtSBSxnMgUn9B5aHcGEit71xefPEmmjMbrk3

NO.58 What is the proper command to enable the AWS secrets engine at the default path?

NO.59 To prepare for day-to-day operations, the root token should be safety saved outside of Vault in order to administer Vault

NO.60 Which three interfaces can be used to access Vault? (select three)

NO.61 True or False: Provisioners should only be used as a last resort.

NO.62 The security barrier protects all of the following Vault components except ___.

NO.63 Which of the following Vault features is available only in the Enterprise version? (select three)