Practice
Learn at your own pace. Answer questions one at a time with instant feedback and explanations.
Start practiceHashiCorp Certified: Vault Associate
Foundational Vault certification for auth, policy, tokens, leases, secrets engines, encryption, architecture, and access management.
Mock exam
Simulate the real thing. Take a timed, full-length test and review your score and weak areas.
Sign up to startStudy your way: beyond Practice and Mock exam, choose adaptive, hard mode, ready review, objective coverage, or retry-your-misses — and set your own question count, timer, and pass mark.
About this exam
Validates foundational Vault knowledge and skills.
Who should take this exam
Cloud engineers with foundational Vault security, development, or operations knowledge.
Career benefits
Demonstrates practical secrets management and Vault operations fundamentals.
How to prepare
Use HashiCorp official objectives and hands-on Vault practice.
Quick facts
Exam cost$70.50 USD plus taxes and fees
Valid for2 years
Length60 minutes
Passing scoreNot publicly disclosed by HashiCorp
FormatMultiple choice; online proctored
Practice questions125
Objectives9
Official pageView
What's covered
1. Authentication methods
- 1a Define the purpose of authentication methods
- 1b Choose an authentication method based on use case
- 1c Explain human versus system authentication methods
- 1d Define identities and groups
- 1e Authenticate using API CLI and UI
- 1f Configure authentication methods
2. Vault policies
- 2a Explain the value of Vault policies
- 2b Describe policy path syntax
- 2c Describe policy capabilities syntax
- 2d Choose a policy based on requirements
- 2e Configure Vault policies
3. Vault tokens
- 3a Choose service or batch tokens
- 3b Describe root token uses and lifecycle
- 3c Explain token accessors
- 3d Explain TTL impact
- 3e Explain orphaned tokens
- 3f Create tokens based on need
4. Vault leases
- 4a Explain lease IDs
- 4b Renew leases
- 4c Revoke leases
5. Secrets engines
- 5a Choose a secrets engine
- 5b Compare dynamic and static secrets
- 5c Describe transit secrets engine uses
- 5d Describe the purpose of secrets engines
- 5e Describe response wrapping
- 5f Explain short-lived dynamic secrets
- 5g Enable secrets engines
- 5h Access Vault secrets
6. Encryption as a service
- 6a Encrypt and decrypt secrets
- 6b Rotate encryption keys
7. Vault architecture fundamentals
- 7a Describe how Vault encrypts data
- 7b Seal and unseal Vault
- 7c Configure environment variables
8. Vault deployment architecture
- 8a Explain cluster strategy
- 8b Explain storage backends
- 8c Explain Shamir secret sharing and unsealing
- 8d Explain disaster recovery and performance replication
- 8e Differentiate self-managed and managed Vault clusters
9. Access management architecture
- 9a Describe Vault Agent
- 9b Describe Vault Secrets Operator
Frequently asked questions
Are these real exam questions?
No. These are original practice questions written to match the exam objectives, each with an explanation so you actually learn the material — not exam dumps.
How does practice mode work?
You answer questions one at a time with instant feedback and explanations. Over time the app adapts, prioritizing the objectives and questions you struggle with most.
What is a mock exam?
A timed, full-length simulation that holds feedback until the end, then shows your score, pass/fail result, and a breakdown by objective.
Can I customize how I study?
Yes. Pick the study mode that fits — adaptive practice, hard mode, ready-for-review, objective coverage, or retrying questions you've missed — and set your own question count, timer, and passing score for each session.
Do I need an account?
You can try free questions for this exam without signing in. Create a free account to save your progress, track weak objectives, and unlock the full question bank.