VA-002-P Exam Dumps : HashiCorp Certified: Vault Associate

Wildcards and path segments can be used to allow access to a broader set of secrets rather than having to call out each individual secret itself. None of the other policies will allow a client to actually read the data stored at the path secrets/applications/app01/api_key

The kv delete command is like a soft delete which deletes the data for the provided path in the key/value secrets engine. If using K/V Version 2, its versioned data will not be fully removed, but marked as deleted and will no longer be available for normal get requests.

The kv destroy command permanently removes the specified versions' data from the key/value secrets engine. If no key exists at the path, no action is taken. It does not deletes all versions of a secret.

The kv metadata delete command deletes all versions and metadata for the provided key.

Batch tokens are generally used for encrypting data because they are lightweight and scalable and also include enough information to use with Vault.