Which of the following statements describe the secrets engine in Vault? Choose three correct answers.

Some secrets engines simply store and read data

You can build your own custom secrets engine

Each secrets engine is isolated to its path

Some secrets engines simply store and read data

Once enabled, you cannot disable the secrets engine

You can build your own custom secrets engine

Each secrets engine is isolated to its path

A secrets engine cannot be enabled at multiple paths

What is a benefit of response wrapping?

Ensure that only a single party can ever unwrap the token and see what's inside

Load balanc secret generation across a Vault cluster

Provide error recovery to a secret so it is not corrupted in transit

Ensure that only a single party can ever unwrap the token and see what's inside

Which of the following describes the Vault's auth method component?

It verifies a client against an internal or external system, and generates a token with the appropriate policies attached

It verifies a client against an internal or external system, and generates a token with root policy

It is responsible for durable storage of client tokens

It dynamically generates a unique set of secrets with appropriate permissions attached

Which of the following statements are true about Vault policies? Choose two correct answers.

Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault

Policies deny by default (empty policy grants no permission)

The default policy can not be modified

You must use YAML to define policies

Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault

Vault must be restarted in order for a policy change to take an effect

Policies deny by default (empty policy grants no permission)

Which statement describes the results of this command: $ vault secrets enable transit

Enables the transit secrets engine at transit path

Requires a root token to execute the command successfully

Enables the transit secrets engine at secret path

Fails due to missing -path parameter

Fails because the transit secrets engine is enabled by default

Use this screenshot to answer the question below: When are you shown these options in the GUI?

Enabling authentication methods

Enabling authentication engines

Enabling authentication methods

Examine the command below. Output has been trimmed. Which of the following statements describe the command and its output?

Generated token's TTL is 60 hours

Generated token is an orphan token which can be renewed indefinitely

Generated token's TTL is 60 hours

Generated token is an orphan token which can be renewed indefinitely

Configures the AppRole auth method with user specified role ID and secret ID

The key/value v2 secrets engine is enabled at secret/ See the following policy: Which of the following operations are permitted by this policy? Choose two correct answers.

vault kv metadata get secret/webapp1

vault kv put secret/webapp1 apikey-'ABCDEFGHI] K123M'

vault kv metadata get secret/webapp1

vault kv delete secret/super-secret

vault kv list secret/super-secret

You are performing a high number of authentications in a short amount of time. You're experiencing slow throughput for token generation. How would you solve this problem?

Increase the time-to-live on service tokens

Reduce the number of policies attached to the tokens

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault's AWS secrets engine and the developer received the following output when requesting a credential from Vault. Which Vault command will revoke the lease and remove the credential from AWS?

vault lease revoke aws/creds/s3-access/f3e92392-7d9c-99c8-c921-57Sd62fe89d8

vault lease revoke AKIAI0WQXTLW36DV7IEA

vault lease revoke f3e92392-7d9c-O9c8-c921-575d62fe80d8

vault lease revoke access_key-AKIAI0WQXTLW36DV7IEA

HashiCorp Vault Associate 002 Practice Test 2 - Free Online Exam Prep & Questions

A web application uses Vault's transit secrets engine to encrypt data in-transit. If an attacker intercepts the data in transit which of the following statements are true? Choose two correct answers.

Become a Premium Member for full access

Unlock Premium Member

HashiCorp Vault Associate 002 Practice Test 2

Question

HashiCorp Vault Associate 002 Practice Tests

Practice Tests