Home

Home / HashiCorp / Vault Associate 002

Question list

List of questions

Question 1

(0)

The following three policies exist in Vault. What do these policies allow an organization to do?

Question 2

(0)

Your DevOps team would like to provision VMs in GCP via a CICD pipeline. They would like to integrate Vault to protect the credentials used by the tool. Which secrets engine would you recommend?

Question 3

(0)

What does the following policy do?

Question 4

(0)

To make an authenticated request via the Vault HTTP API, which header would you use?

Question 5

(0)

Which of the following are replication methods available in Vault Enterprise? Choose two correct answers.

Question 6

(0)

When an auth method is disabled all users authenticated via that method lose access.

Question 7

(0)

Which of these is not a benefit of dynamic secrets?

Question 8

(0)

Which of the following cannot define the maximum time-to-live (TTL) for a token?

Question 9

(0)

What are orphan tokens?

Question 10

(0)

To give a role the ability to display or output all of the end points under the /secrets/apps/* end point it would need to have which capability set?

Open VPLUS File

Convert VPLUS to PDF

Related questions

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault's AWS secrets engine and the developer received the following output when requesting a credential from Vault. Which Vault command will revoke the lease and remove the credential from AWS?

What can be used to limit the scope of a credential breach?

What does the following policy do?

Which statement describes the results of this command: $ vault secrets enable transit

Use this screenshot to answer the question below: Where on this page would you click to view a secret located at secret/my-secret?

The Vault encryption key is stored in Vault's backend storage.

An authentication method should be selected for a use case based on:

Where can you set the Vault seal configuration? Choose two correct answers.

When unsealing Vault, each Shamir unseal key should be entered:

Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

Question 8 - Vault Associate 002 discussion

Report

Which of the following cannot define the maximum time-to-live (TTL) for a token?

A.

By the authentication method t natively provide a method of expiring credentials

B.

By the client system f credentials leaking

C.

By the mount endpoint configuration very password used

D.

A parent token TTL e password rotation tools and practices

E.

System max TTL

Show Answer

asked 18/09/2024

Robbie Shen

34 questions

User

Your answer: A B C D E

0 comments

Sorted by

Leave a comment first