Question 1

Examine the command below. Output has been trimmed.

Which of the following statements describe the command and its output?

Options :

A : Missing a default token policy

B : Generated token-s TTL is 60 hours

C : Generated token is an orphan token which can be renewed indefinitely

D : Configures the AppRole auth method with user specified role ID and secret ID

Answer: B,C

Question 2

You want to encrypt a credit card number using the Transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned? $ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121" Error: * illegal base64 data at input byte 4

Options :

A : The plain text data needs to be encoded to base64

B : The token used to issue the encryption request does not have the appropriate permissions

C :

Credit card numbers are not supported using the Transit secrets engine since it is considered sensitive data

D : The credit card number should not include spaces

Answer: A

Question 3

Which of the following is NOT a valid way in which a lease can be revoked in Vault?

Options :

A : Using the user interface (UI)

B : Automatically when the TTL or Max-TTL expires

C : Using the API to call the /v1/sys/leases endpoint

D : Via the CLI using the vault token command

Answer: D

Question 4

Based on the following output, what command can Steve use to determine if the KV store is configured for versioning? text CollapseWrapCopy $ vault secrets list Path Type Accessor Description ---- ---- -------- ----------- automation/ kv kv_56f991b9 Automation team for CI/CD cloud/ kv kv_4426c541 Cloud team for static secrets cubbyhole/ cubbyhole cubbyhole_9bd538e per-token priv secret storage data_team/ kv kv_96d57692 Data warehouse KV for certs identity/ identity identity_0042595e identity store network/ kv kv_3e53aaab Network team secret storage secret/ kv kv_d66e2adc key/value secret storage sys/ system system_d6f218a9 system endpoints

Options :

A : vault secrets list -all

B : vault kv get automation

C : vault secrets list -detailed

D : vault kv list

Answer: C

Question 5

After issuing the command to delete a secret, you run a vault kv list command, but the path to the secret still seems to exist. What command would permanently delete the path from Vault?

Options :

A : vault kv delete -force kv/applications/app01

B : vault kv destroy -versions=1 kv/applications/app01

C : vault kv metadata delete kv/applications/app01

D : vault kv delete -all kv/applications/app01

Answer: C

Free Vault-Associate Mock Exam – Practice Online Confidently

Buying Options: