VA-003 Compare and configure secrets engines Practice Question
An administrator wants to view all currently enabled secrets engines and their mount paths. Which command provides this information?
⚠ Common exam trap
Candidates often confuse `vault read sys/mounts` as a valid command, but the Vault CLI uses `vault secrets list` for this purpose. Option D is a trap that appears plausible but is not a supported command.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vault secrets list
The correct command to list all enabled secrets engines and their mount paths is `vault secrets list` (option B). Option D, `vault read sys/mounts`, is not a valid command in the Vault CLI; the endpoint `sys/mounts` is accessed via `vault secrets list` or by directly reading the path with `vault read sys/mounts` in some contexts, but the CLI command `vault read sys/mounts` does not exist. Options A and C are incorrect: `vault list sys/mounts` is not valid, and `vault secrets show` is not a real command.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
vault list sys/mounts
Why it's wrong here
`vault list sys/mounts` is not a valid command because `sys/mounts` does not support the list operation.
- ✓
vault secrets list
Why this is correct
`vault secrets list` is the standard CLI command that displays all enabled secrets engines and their mount paths.
- ✗
vault secrets show
Why it's wrong here
`vault secrets show` is not a valid Vault CLI command.
- ✗
vault read sys/mounts
Why it's wrong here
`vault read sys/mounts` is not a valid command in the Vault CLI; the correct way to read this endpoint is through `vault secrets list`.
Go deeper
Related to this question
About these practice questions
This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.