Courseiva
Compare and configure secrets enginesmediumMatchingObjective-mapped

VA-003 Compare and configure secrets engines Practice Question

Match each Vault storage backend to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Highly available, key-value store

Integrated storage with consensus

Local filesystem storage

AWS object storage

AWS NoSQL database

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Consul: Stores data in a highly available key-value store, commonly used for Vault's backend.

Vault supports multiple storage backends. Consul and Integrated Raft are both highly available, while File is for single-node setups. Common confusions include mixing Consul's distributed KV nature with file-based storage or incorrectly attributing external dependencies to Raft.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Consul: Stores data in a highly available key-value store, commonly used for Vault's backend.

    Why this is correct

    Correct. Consul is a distributed key-value store often used as Vault's storage backend for high availability.

  • Integrated Raft: Uses a distributed consensus protocol for high availability and automatic data replication.

    Why this is correct

    Correct. Integrated Storage (Raft) is built into Vault and uses the Raft consensus algorithm for HA.

  • File: Stores data as encrypted files on the local filesystem, suitable for single-node deployments.

    Why this is correct

    Correct. The File storage backend writes encrypted data to the local filesystem, ideal for development or single-node setups.

  • Consul: Stores data in encrypted files on disk with manual replication.

    Why it's wrong here

    Incorrect. This description matches the File backend, not Consul. Consul uses a key-value store, not files on disk.

  • Integrated Raft: Stores data in an external key-value store like etcd.

    Why it's wrong here

    Incorrect. Integrated Storage (Raft) is built into Vault and does not rely on an external store. Etcd is a separate backend.

About these practice questions

This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.