Online Access Free Vault-Associate Practice Test

Which of the following describes usage of an identity group?

• A.Consistently apply the same set of policies to a collection of entities
• B.Limit the policies that would otherwise apply to an entity in the group
• C.When they want to revoke the credentials for a whole set of entities simultaneously
• D.Audit token usage

You are using Vault's Transit secrets engine to encrypt your dat
a. You want to reduce the amount of content encrypted with a single key in case the key gets compromised. How would you do this?

• A.Use 4096-bit RSA key to encrypt the data
• B.Periodically rotate the encryption key
• C.Periodically re-key the Vault's unseal keys
• D.Upgrade to Vault Enterprise and integrate with HSM

Which of the following statements are true about Vault policies? Choose two correct answers.

• A.Policies provide a declarative way to grant or forbid access to certain paths and operations in Vault
• B.Policies deny by default (empty policy grants no permission)
• C.You must use YAML to define policies
• D.Vault must be restarted in order for a policy change to take an effect
• E.The default policy can not be modified

Where can you set the Vault seal configuration? Choose two correct answers.

• A.Environment variables
• B.Vault API
• C.Vault CLI
• D.Vault configuration file
• E.Cloud Provider KMS

Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

• A.Transit
• B.Cloud KMS
• C.Key/Value secrets engine version 2, with TTL defined
• D.PKI