VA-003 Compare authentication methods Practice Question
An administrator needs to enable authentication method for human users that integrates with an existing LDAP directory. The company wants to ensure that Vault can perform group-based policy assignment based on LDAP group membership. Which configuration step is mandatory to map LDAP groups to Vault policies?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the 'groups' attribute to 'memberOf'
The 'groups' attribute mapping must be set to point to the LDAP attribute containing group membership. The 'users' attribute is for user mapping, 'upndomain' is for UPN suffix, 'certificate' is for TLS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set the 'upndomain' parameter to 'company.com'
Why it's wrong here
This is for UPN domain, not group mapping.
- ✗
Set the 'users' attribute to 'sAMAccountName'
Why it's wrong here
This maps the username attribute, not group membership.
- ✓
Set the 'groups' attribute to 'memberOf'
Why this is correct
This tells Vault which LDAP attribute holds group membership.
- ✗
Set the 'certificate' parameter with the LDAP server certificate
Why it's wrong here
This is for TLS, not group mapping.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.