VA-003 Explain Vault architecture Practice Question
Which TWO statements about Vault replication are correct?
⚠ Common exam trap
HashiCorp often tests the misconception that performance replication replicates all data (including auth methods and mount configurations), when in fact it only replicates the data within the mount paths and does not replicate auth method configurations or system data like tokens.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DR replication replicates all data including tokens and leases.
Vault DR replication is designed to replicate all data, including tokens, leases, and secrets, to a secondary cluster for disaster recovery purposes. This ensures that the secondary cluster can take over with a complete state if the primary fails, as it mirrors the entire Vault data store.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A DR secondary can be promoted to primary only if the primary is offline.
Why it's wrong here
Promotion can happen at any time, but it disrupts replication.
- ✓
DR replication replicates all data including tokens and leases.
Why this is correct
DR replication is a full data copy.
- ✓
Performance replication allows read requests to be served locally on the secondary cluster.
Why this is correct
Performance secondaries handle reads from local storage.
- ✗
Performance replication replicates all secrets and auth methods.
Why it's wrong here
Only specific mount paths are replicated.
- ✗
Both performance and DR replication require a shared storage backend.
Why it's wrong here
Each cluster has its own storage backend.
Go deeper
Related to this question
About these practice questions
This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.