VA-003 Utilize Vault CLI and API Practice Question
A user runs 'vault write secret/mydata value=hello' and gets a warning about missing metadata. They intended to store a simple key-value pair. What is the most likely issue?
⚠ Common exam trap
HashiCorp often tests the distinction between KV v1 and KV v2 path requirements, trapping candidates who assume all key-value engines use the same flat path structure without the `data/` prefix.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The path is under KV v2 engine, which requires the data/ prefix.
The warning about missing metadata indicates the path is under a KV v2 secret engine, which requires the `data/` prefix before the path (e.g., `vault write secret/data/mydata value=hello`). KV v2 stores metadata and versioned data separately, so writing directly to `secret/mydata` triggers a warning because it expects the `data/` subpath. This is the most likely issue given the user's intent to store a simple key-value pair.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The value must be JSON-encoded.
Why it's wrong here
Incorrect. Vault accepts plain text values; JSON encoding is not required for KV stores. The warning is about missing metadata, not about encoding.
- ✗
The token lacks write capability on that path.
Why it's wrong here
Incorrect. A lack of write capability would result in a permission denied error, not a warning about missing metadata.
- ✓
The path is under KV v2 engine, which requires the data/ prefix.
Why this is correct
Correct. In KV v2, writing directly to the path without the data/ subpath triggers a warning because it expects metadata. Using `vault write secret/data/mydata value=hello` would work correctly.
- ✗
The secret engine is not enabled.
Why it's wrong here
Incorrect. If the engine were not enabled, the command would fail with an error that the path is not found, not a warning about metadata.
Go deeper
Related to this question
About these practice questions
One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.