HCVA0-002 · ● Active · Associate · HashiCorp (IBM)
Foundational certification validating core knowledge of HashiCorp Vault, secrets management, authentication methods, and encryption-as-a-service. For Cloud Engineers with 6+ months Vault experience.
Exam facts
| Field | Value |
|---|---|
| Cost | $70.50 USD |
| Duration | 60 minutes |
| Questions | 57 |
| Passing | 70% |
| Format | Multiple choice, true/false, scenario-based, UI click-on questions |
| Delivery | Online proctored (Pearson VUE) |
| Languages | English |
| Valid | 3 years |
| Renewal | Pass Vault Operations Professional (higher level) or retake |
| Prerequisites | None; 6+ months hands-on Vault experience recommended |
| Released | 2020 (version 2, superseded 001) |
| Retiring | N/A (currently active; version 003 released but 002 remains in use) |
Vendor source — HashiCorp Certifications ↗
Official exam guide — Vault Associate 002 Learning Path ↗
Exam objectives — Vault Associate Exam Content ↗
About
The HashiCorp Certified: Vault Associate (002) validates foundational knowledge of Vault, the industry-standard secrets management and encryption-as-a-service platform. Introduced in 2020 to replace version 001, the exam tests your ability to deploy, configure, authenticate, and manage Vault in production. This is the entry-level certification in HashiCorp's Vault track and serves as a prerequisite for the Vault Operations Professional (expert) exam.
Domain context — Security / DevOps / Secrets Management
Enterprise secret storage, key rotation, dynamic secrets, authentication, and encryption-in-transit. Vault is widely adopted for zero-trust architectures, CI/CD pipeline security, and compliance-driven secret lifecycle management. This domain spans security infrastructure, DevOps tooling, and identity/access control.
Read full deep dive — HashiCorp Ecosystem → Read full deep dive — Secrets Management →
Topics covered
Official exam blueprint weighted by domain:
- Authentication Methods (15%) — Userpass, LDAP, AppRole, JWT/OIDC, AWS IAM, Azure AD; selecting appropriate method by use case; human vs. system authentication.
- Auth Methods Configuration (15%) — Configuring and troubleshooting authentication mechanisms; managing auth method lifecycles; token generation workflows.
- Vault Encryption & Policies (15%) — Vault policy syntax; path and capability definitions; policy testing; root token; token lifecycle; leases and renewal.
- Secrets Engines (15%) — Static and dynamic secrets; enabling/disabling engines; KV v1/v2; database dynamic secrets; PKI; SSH; AWS secrets; transit engine basics.
- Run a Vault Cluster (10%) — Vault architecture; high availability; storage backends; Raft; unsealing; initialization; disaster recovery.
- Configure Vault for AAA (15%) — Authentication, authorization, accounting; audit logging; compliance requirements; multi-tenant configuration.
- Manage Vault Tokens (10%) — Token types (service, batch); token lifecycle; TTL/max-TTL; orphan tokens; token policies.
- Read Security Models (5%) — Vault's security model; threat model; attack surface; least-privilege design patterns.
Source: Official exam learning path ↗
Common skills at Security/DevOps/Secrets Mgmt · Associate
Shared competencies for Associate-level security and DevOps practitioners.
- Secret lifecycle management and rotation strategy
- Zero-trust architecture principles and implementation
- Authentication method selection and configuration
- Least-privilege access control policies
- Audit logging and compliance requirements
- High-availability and disaster recovery design
- CI/CD pipeline security integration
- PKI and certificate management fundamentals
- Identity and access management (IAM) concepts
- Encryption-in-transit and data protection strategy
Recommended courses at Security/DevOps/Secrets Mgmt · Associate
| Provider | Title | Cost | URL |
|---|---|---|---|
| Bryan Krausen (Udemy) | HashiCorp Certified: Vault Associate 003 (w/ Hands-On Labs) | $12–$60 | ↗ |
| HashiCorp Learn | Vault Associate Tutorials (official) | Free | ↗ |
| KodeKloud | HashiCorp Certified Vault Associate Certification | $20–$40 | ↗ |
| Pluralsight | HashiCorp Certified: Vault Associate | $30–$180 (annual) | ↗ |
| A Cloud Guru | Vault Associate Certification | $30–$100 | ↗ |
Course-selection rule: Bryan Krausen's Udemy course (200,000+ enrollments) is recognized as the gold standard, with 10+ years of production Vault experience and hands-on labs. HashiCorp's official tutorials are free and authoritative but less structured; use as primary reference.
Practice exams
| Provider | Title | Cost | URL |
|---|---|---|---|
| Whizlabs | HashiCorp Certified Vault Associate Practice Exam | $15–$30 | ↗ |
| Bryan Krausen (Udemy) | HashiCorp Certified: Vault Associate 003 Practice Exams | $12–$60 | ↗ |
| ExamTopics | Vault Associate 002 Exam Questions (community) | Free (limited) | ↗ |
Books
| Title | Author | Publisher | Year | ISBN | URL |
|---|---|---|---|---|---|
| Running HashiCorp Vault in Production | Dan McTeer, Bryan Krausen | Independent | 2020 | 9798639476969 | ↗ |
| Vault Official Documentation | HashiCorp | Official | 2024 | N/A | ↗ |
Book rule: "Running HashiCorp Vault in Production" (McTeer & Krausen) is the authoritative practitioner guide covering architecture, deployment, HA, and operational best practices. Vault's official documentation online is comprehensive and current; no other official textbook exists for the 002 exam.
Typical job titles at Security/DevOps/Secrets Mgmt · Associate
DevOps Engineer (Secrets Management) · Cloud Security Engineer (Vault) · Platform Engineer (Infrastructure) · Security Automation Engineer · Site Reliability Engineer (SRE) · Cloud Infrastructure Engineer · Infrastructure-as-Code (IaC) Specialist
(Job titles drawn from current job-board postings that list Vault Associate or equivalent hands-on Vault experience as required or preferred.)
Salary
| Region | Range | Source |
|---|---|---|
| USD | $115,000 – $160,000 | Glassdoor ↗ · ZipRecruiter ↗ · PayScale ↗ |
| ZAR | R180,000 – R280,000 | PayScale ZA ↗ · CareerJunction ↗ |
| GBP | £85,000 – £130,000 | IT Jobs Watch ↗ · Hays ↗ |
Salary rule: Vault Associate directly supports Cloud Security Engineer and DevOps Engineer roles; salary ranges reflect Associate-level practitioners with 2–4 years experience in security/DevOps specializations. Entry-level roles start ~$90K USD; mid-level $115–$145K; senior roles $160K+.
Skills validated
Vault Associate (002)-specific skills tested on the exam.
- Vault unsealing and initialization workflows
- Authentication method configuration (userpass, LDAP, AppRole, JWT/OIDC, AWS IAM)
- Vault policy syntax and least-privilege design
- Secrets engine operation (KV, database, PKI, transit, AWS, SSH)
- Token types and lifecycle management (service tokens, batch tokens, orphans)
- Lease management, renewal, and revocation
- High-availability cluster architecture and Raft consensus
- Audit logging and compliance auditing
- Encryption-as-a-service (transit engine) for data protection
- Dynamic secret generation for databases and cloud credentials
- Vault API and CLI command usage
- Vault UI navigation and configuration
Related certifications
- Stacks with: HashiCorp Certified: Terraform Associate (004) ↗ · HashiCorp Certified: Consul Associate ↗
- Prerequisite for: HashiCorp Certified: Vault Operations Professional ↗ (expert-level lab exam; $295; requires advanced production experience)
- Replaces: Vault Associate 001 (retired 2020)
- Equivalents at this level: AWS Certified Security - Specialty ↗ · Microsoft Azure Security Engineer Associate (AZ-500) ↗ · Google Cloud Associate Cloud Security Engineer ↗
- Vendor overview: HashiCorp Vendor Deep Dive ↗
Sources
- HashiCorp Certifications: https://developer.hashicorp.com/certifications/security-automation
- Vault Associate 002 Learning Path: https://developer.hashicorp.com/vault/tutorials/certification-002
- Vault Official Documentation: https://www.vaultproject.io/docs
- Running HashiCorp Vault in Production (Amazon): https://www.amazon.com/Running-HashiCorp-Vault-Production-McTeer/dp/B08LNQML27
- Bryan Krausen Udemy Courses: https://www.udemy.com/user/bryan-krausen/
- Whizlabs Vault Associate Practice Exam: https://www.whizlabs.com/hashicorp-certified-vault-associate/
- ExamTopics Vault Associate 002 Questions: https://www.examtopics.com/exams/hashicorp/vault-associate-002/
- Glassdoor Cloud Security Engineer Salaries: https://www.glassdoor.com/Salaries/cloud-security-engineer-salary-SRCH_KO0,23.htm
- ZipRecruiter Cloud Security Engineer Salaries: https://www.ziprecruiter.com/Salaries/Cloud-Security-Engineer-Salary
- PayScale Cloud Security Engineer Salaries: https://www.payscale.com/research/US/Job=Cloud_Security_Engineer/Salary
Last verified: 2026-05-01
Parent ecosystem: HashiCorp
Parent domain: Security / DevOps / Secrets Management
Vendor overview: HashiCorp Vendor Deep Dive