Drag a concept onto its matching description — or click a concept then click the description.
Concepts
Matches
Allow creating data at a path
Allow reading data at a path
Allow modifying existing data
Allow deleting data
Allow listing keys
VA-003 Utilize Vault CLI and API Practice Question
Match each Vault policy capability to its permission.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
create: Allows creating data at the path.
The correct matches are: create allows creating data, read allows reading data, update allows updating data, and delete allows deleting data. Common confusions involve swapping create and read capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
create: Allows creating data at the path.
Why this is correct
The 'create' capability specifically permits the creation of new data at the given path.
- ✓
read: Allows reading data at the path.
Why this is correct
The 'read' capability permits reading data from the specified path.
- ✓
update: Allows updating data at the path.
Why this is correct
The 'update' capability permits modifying existing data at the path.
- ✓
delete: Allows deleting data at the path.
Why this is correct
The 'delete' capability permits removing data at the path.
- ✗
create: Allows reading data at the path.
Why it's wrong here
Incorrect — 'create' capability does not grant read access; that is the role of 'read'.
- ✗
read: Allows creating data at the path.
Why it's wrong here
Incorrect — 'read' capability does not grant create access; that is the role of 'create'.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.