A company has a Vault Enterprise DR setup. The primary cluster has failed and cannot be recovered. The DR secondary is healthy and has been promoted to primary. What must the operator do to ensure clients can continue to use Vault?

Re-enable DR replication on the new primary and configure a new secondary.

Update client configurations to point to the new primary's address.

Run `vault operator unseal` on the new primary to ensure it is unsealed.

Restore the old primary from backup and connect it to the new primary.

In a multi-cluster setup with both DR and performance replication, what is the role of the DR secondary?

It automatically takes over if the primary fails

It replicates data to performance secondaries

It serves as a standby for disaster recovery and does not handle read requests

It handles read requests to offload the primary

A company has a Vault Enterprise DR setup. The primary in region A has been demoted for a planned failover. The DR secondary in region B has been promoted to primary. After the failover, the operator wants to re-establish DR protection. What is the correct sequence of steps?

Disable DR replication on the new primary and re-enable it with the same token.

Run `vault write sys/replication/dr/secondary/update-primary` on the new primary to point it to the old primary.

Re-enable DR replication on the old primary and connect it to the new primary as a secondary.

Enable DR replication on the new primary, generate a new secondary token, and configure a new DR secondary in region A.

What is the primary purpose of Vault Enterprise disaster recovery (DR) replication?

To synchronize Vault configuration across multiple clusters for load balancing

To replicate secrets and metadata to secondary clusters for read scaling

To enable automatic failover without any manual intervention

To provide a warm standby cluster that can be promoted in the event of a disaster

A Vault operator is setting up DR replication for the first time. They have enabled DR replication on the primary cluster. When generating the secondary activation token, what must the operator specify to uniquely identify the secondary?

The `token` parameter, which is the unseal key of the secondary.

A unique `id` parameter, such as `dr-secondary-1`.

The `replication_id` parameter, which is the cluster ID of the primary.

The `primary_addr` parameter, pointing to the secondary's address.

HashiCorp Certified:Vault Operations Professional

Domain 4Objective 2

[ Vault Enterprise] Enable and Configure Disaster Recovery (DR) Replication VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Part of the Build fault-tolerant Vault environments domain, which makes up ~10% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–16 in this domain), expect 3–5 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

Questions 16–20

16application · medium
A company has a Vault Enterprise DR setup. The primary cluster has failed and cannot be recovered. The DR secondary is healthy and has been promoted to primary. What must the operator do to ensure clients can continue to use Vault?
Select an answer first
17foundation · easy
In a multi-cluster setup with both DR and performance replication, what is the role of the DR secondary?
Select an answer first
18expert · hard
A company has a Vault Enterprise DR setup. The primary in region A has been demoted for a planned failover. The DR secondary in region B has been promoted to primary. After the failover, the operator wants to re-establish DR protection. What is the correct sequence of steps?
Select an answer first
19foundation · easy
What is the primary purpose of Vault Enterprise disaster recovery (DR) replication?
Select an answer first
20application · medium
A Vault operator is setting up DR replication for the first time. They have enabled DR replication on the primary cluster. When generating the secondary activation token, what must the operator specify to uniquely identify the secondary?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.