VA-003 KV v2 Path Structure Practice Question
Which TWO of the following are valid paths for reading and writing data in the KV v2 secrets engine? (Choose two.)
⚠ Common exam trap
HashiCorp often tests the distinction between KV v1 and KV v2 paths, trapping candidates who assume both `/data/` and `/metadata/` paths can be used for data operations, when in fact only `/data/` handles reading and writing secret data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
secret/data/myapp
In the KV v2 secrets engine, the `/data/` path is the only endpoint for reading and writing actual secret data. The `/metadata/` path is used for managing metadata (e.g., versions, deletion), not for reading and writing data. Therefore, only option B is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
secret/delete/myapp
Why it's wrong here
Incorrect. The `delete` path is used for soft-deleting a secret version, not for reading or writing data.
- ✓
secret/data/myapp
Why this is correct
Correct. The `/data/` path is the standard endpoint for reading and writing secret values in KV v2.
- ✗
secret/destroy/myapp
Why it's wrong here
Incorrect. The `destroy` path is used for permanently destroying a version, not for reading or writing data.
- ✗
secret/myapp
Why it's wrong here
Incorrect. A base path like `secret/myapp` is for KV v1; in KV v2, the `/data/` sub-path is required.
- ✗
secret/metadata/myapp
Why it's wrong here
Incorrect. The `/metadata/` path is for reading and writing metadata (e.g., version info, custom metadata), not the secret data itself.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.