HashiCorp Exam HCVA0-003 Topic 9 Question 1 Discussion

Actual exam question for HashiCorp's HCVA0-003 exam

Question #: 1
Topic #: 9

[All HCVA0-003 Questions]

When creating a policy, an error was thrown:

Which statement describes the fix for this issue?

AReplace write with create in the capabilities list

BYou cannot have a wildcard (' * ') in the path

Csudo is not a capability

Show Suggested Answer

Suggested Answer: A

The error was thrown because the policy code contains an invalid capability, ''write''. The valid capabilities for a policy are ''create'', ''read'', ''update'', ''delete'', ''list'', and ''sudo''. The ''write'' capability is not recognized by Vault and should be replaced with ''create'', which allows creating new secrets or overwriting existing ones. The other statements are not correct, because the wildcard (*) and the sudo capability are both valid in a policy. The wildcard matches any number of characters within a path segment, and the sudo capability allows performing certain operations that require root privileges.

[Policy Syntax | Vault | HashiCorp Developer]

by Wai at Apr 06, 2025, 06:37 PM

Limited Time Offer

25%

Off

Get Premium HCVA0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Doyle

2 months ago

I'm with Mabel on this one. Wildcards in the path? That's a big no-no. B is the answer, no doubt about it.

upvoted 0 times

Ollie

9 days ago

Yeah, I think focusing on removing the wildcard is the key to fixing the error.

upvoted 0 times

...

Von

13 days ago

I see your point, but I think the wildcard in the path is the main issue here.

upvoted 0 times

...

Coral

20 days ago

But what about sudo not being a capability? Could that also be a problem?

upvoted 0 times

...

Johnson

28 days ago

I agree with you, wildcards can cause issues. B is the way to go.

upvoted 0 times

...

Tamar

2 months ago

A? Replace 'write' with 'create'? Nah, that's not gonna cut it. Gotta go with B, my dude.

upvoted 0 times

...

Mabel

2 months ago

Haha, I bet the developer who wrote this policy was trying to be a little too clever with the wildcard. B is the right answer, for sure.

upvoted 0 times

Rosann

24 days ago

Yeah, sudo is not a capability that should be included in the policy.

upvoted 0 times

...

Shala

25 days ago

Definitely, replacing write with create is the fix we need.

upvoted 0 times

...

Frederica

30 days ago

User 3: The fix is to remove the wildcard and be more specific in the path.

upvoted 0 times

...

Charlena

1 months ago

User 2: Definitely, it's best to avoid using wildcards in policies.

upvoted 0 times

...

Paola

1 months ago

User 1: I agree, using a wildcard in the path can cause errors.

upvoted 0 times

...

Christoper

1 months ago

I agree, using a wildcard in the path can cause issues.

upvoted 0 times

...

Susy

3 months ago

But sudo is not a capability, so option C could also be the fix.

upvoted 0 times

...

Iraida

3 months ago

C is the way to go. 'sudo' is not a capability, so that's the problem. Rookie mistake, but easy to fix.

upvoted 0 times

Otis

2 months ago

C) sudo is not a capability

upvoted 0 times

...

Ahmad

2 months ago

B) You cannot have a wildcard (\' * \') in the path

upvoted 0 times

...

An

3 months ago

A) Replace write with create in the capabilities list

upvoted 0 times

...

Candida

3 months ago

Hmm, I think the fix is B. You can't have a wildcard in the path. That's a common mistake I've seen before.

upvoted 0 times

Dahlia

1 months ago

No, sudo is not a capability. That's the fix for this issue.

upvoted 0 times

...

Mary

1 months ago

So we should replace write with create in the capabilities list?

upvoted 0 times

...

Elke

2 months ago

I agree, that's a common mistake I've seen before.

upvoted 0 times

...

Curtis

2 months ago

I think the fix is B. You can't have a wildcard in the path.

upvoted 0 times

...

Carmen

2 months ago

Yes, let's replace it with a specific path instead.

upvoted 0 times

...

Quentin

2 months ago

So, we should avoid using wildcard in the path for this policy.

upvoted 0 times

...

Fausto

2 months ago

I agree, that's a common mistake I've seen before.

upvoted 0 times

...

Kenneth

3 months ago

I think the fix is B. You can't have a wildcard in the path.

upvoted 0 times

...

Junita

3 months ago

I disagree, I believe the issue is with having a wildcard in the path.

upvoted 0 times

...

Susy

4 months ago

I think the fix is to replace write with create in the capabilities list.

upvoted 0 times

...