HashiCorp Certified: Vault Operations Professional

Exam format

HashiCorp logo

HashiCorp Certified: Vault Operations Professional Exam Format

HCVOP-002

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The HashiCorp Certified: Vault Operations Professional certification proves the skills needed to securely deploy, operate, and maintain Vault in production environments. It covers architectural planning, high availability and replication, authentication and access control, secrets engines, data protection, monitoring, audit, upgrades, troubleshooting, and Vault Enterprise governance. Successful candidates demonstrate operational excellence and security best practices.

57 questions
240 min
70% to pass
7 domains

Exam facts at a glance

What we know about this exam, and where the information comes from.

SpecificationValue
Questions57
Time limit240 minutes (253s per question)
Passing score70%
Domains7
LevelProfessional
Question bank here57 questions
SourceCertilum's own record — the vendor does not publish this figure

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Deploy and Configure Vault20%
  • Install and configure Vault binaries, systemd units, and configuration files
  • Configure server listeners, storage, telemetry, and log outputs
  • Configure high availability cluster settings and node addresses
  • +3 more
11
High Availability and Replication15%
  • Describe Vault HA architecture, leader election, and request forwarding
  • Configure integrated Raft storage and manage Vault nodes
  • Configure Vault Enterprise performance replication clusters
  • +3 more
8
Monitoring, Logging, and Auditing12%
  • Configure file, syslog, and socket audit devices
  • Enable Prometheus telemetry and system metrics
  • Analyze Vault logs, audit logs, and vault operator commands
  • +2 more
7
Enterprise Features and Governance8%
  • Configure Vault Enterprise namespaces for tenant isolation
  • Write and enforce Sentinel policies for governance-as-code
  • Configure control groups to require multi-party approvals
  • +4 more
5
Secrets Engines and Data Protection17%
  • Configure KV, PKI, database, AWS, Azure, GCP, and Transit secrets engines
  • Enable dynamic secrets generation and manage lease lifetimes
  • Use Transit encryption-as-a-service and key management
  • +3 more
10
Upgrades, Scaling, and Troubleshooting10%
  • Perform upgrades for Vault OSS and Enterprise with zero downtime
  • Take and restore integrated Raft snapshots
  • Scale Vault clusters by adding nodes and tuning performance
  • +4 more
6
Authentication Methods and Access Control18%
  • Configure and tune authentication methods such as token, AppRole, AWS, Kubernetes, LDAP, and OIDC
  • Manage tokens, leases, TTLs, and token lifecycle operations
  • Write Vault policies with paths, capabilities, and allowed parameters
  • +3 more
10

The heaviest domain is Deploy and Configure Vault at 20%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: 4-hour lab-based exam, online proctored, credential valid 2 years. HashiCorp Associate exams cost $70.50 (no retake included); Professional exams $295 with 1 free retake. Official exam page

More about the HashiCorp Certified: Vault Operations Professional exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the HashiCorp Certified: Vault Operations Professional exam.