Courseiva
Compare and configure secrets engineshardMultiple ChoiceObjective-mapped

VA-003 Compare and configure secrets engines Practice Question

An organization needs to store secrets with versioning support, allowing rollback to previous secret values. Which KV secrets engine version should be enabled?

⚠ Common exam trap

HashiCorp often tests the misconception that KV v3 exists or that the Transit secrets engine can handle versioned secret storage, leading candidates to choose those incorrect options.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

KV v2

KV v2 is the correct choice because it provides versioning support for secrets, allowing users to retrieve and rollback to previous secret values. KV v1 stores secrets without versioning, and the Transit secrets engine is designed for encryption/decryption operations, not secret storage with versioning.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • KV v3

    Why it's wrong here

    There is no KV v3 in Vault; current versions are kv-v1 and kv-v2.

  • KV v1

    Why it's wrong here

    KV v1 does not support versioning; it overwrites data.

  • KV v2

    Why this is correct

    KV v2 stores metadata and multiple versions, allowing rollback and undelete.

  • Transit secrets engine

    Why it's wrong here

    Transit is for encryption, not secret storage with versioning.

About these practice questions

One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.