Free HashiCorp Vault-Associate Exam Dumps Questions & Answers

The Vault encryption key is stored in Vault's backend storage.

• A.  False
• B.  True

You have been tasked with writing a policy that will allow read permissions for all secrets at path secret/bar. The users that are assigned this policy should also be able to list the secrets. What should this policy look like?

• A. 
• B. 
• C. 
• D. 

Which Vault secret engine may be used to build your own internal certificate authority?

• A.  Generic
• B.  Transit
• C.  PKI
• D.  PostgreSQL

Where can you set the Vault seal configuration? Choose two correct answers.

• A.  Environment variables
• B.  Cloud Provider KMS
• C.  Vault configuration file
• D.  Vault CLI
• E.  Vault API

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault's AWS secrets engine and the developer received the following output when requesting a credential from Vault.

Which Vault command will revoke the lease and remove the credential from AWS?

• A.  vault lease revoke f3e92392-7d9c-O9c8-c921-575d62fe80d8
• B.  vault lease revoke aws/creds/s3-access/f3e92392-7d9c-99c8-c921-57Sd62fe89d8
• C.  vault lease revoke AKIAI0WQXTLW36DV7IEA
• D.  vault lease revoke access_key-AKIAI0WQXTLW36DV7IEA