ExamGecko
Question list
Search
Search

Question 35 - Vault Associate 002 discussion

Report
Export

Where can you set the Vault seal configuration? Choose two correct answers.

A.
Cloud Provider KMS
Answers
A.
Cloud Provider KMS
B.
Vault CLI
Answers
B.
Vault CLI
C.
Vault configuration file
Answers
C.
Vault configuration file
D.
Environment variables
Answers
D.
Environment variables
E.
Vault API
Answers
E.
Vault API
Suggested answer: C, D

Explanation:

The Vault seal configuration can be set in two ways: through the Vault configuration file or through environment variables. The Vault configuration file is a text file that contains the settings and options for Vault, such as the storage backend, the listener, the telemetry, and the seal. The seal stanza in the configuration file specifies the seal type and the parameters to use for additional data protection, such as using HSM or Cloud KMS solutions to encrypt and decrypt the root key. The seal configuration can also be set through environment variables, which will take precedence over the values in the configuration file. The environment variables are prefixed with VAULT_SEAL_ and followed by the seal type and the parameter name. For example, VAULT_SEAL_AWSKMS_REGION sets the region for the AWS KMS seal.Reference:Seals - Configuration | Vault | HashiCorp Developer,Environment Variables | Vault | HashiCorp Developer

asked 18/09/2024
Gary Corley
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first