Question 1

Which of the following token attributes can be used to renew a token in Vault (select two)?

Options :

A : TTL

B : Token ID

C : Identity policy

D : Token accessor

Answer: B,D

Question 2

As a best practice, the root token should be stored in which of the following ways?

Options :

A : Should be revoked and never stored after initial setup

B : Should be stored in configuration automation tooling

C : Should be stored in another password safe

D : Should be stored in Vault

Answer: A

Question 3

True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

Options :

A : True

B : False

Answer: B

Question 4

When Vault is sealed, which are the only two operations available to a Vault administrator? (Select two)

Options :

A : View the status of Vault

B : Configure policies

C : View data stored in the key/value store

D : Rotate the encryption key

E : Unseal Vault

F : Author security policies

Answer: A,E

Question 5

After issuing the command to delete a secret, you run a vault kv list command, but the path to the secret still seems to exist. What command would permanently delete the path from Vault?

Options :

A : vault kv delete -force kv/applications/app01

B : vault kv destroy -versions=1 kv/applications/app01

C : vault kv metadata delete kv/applications/app01

D : vault kv delete -all kv/applications/app01

Answer: C

Free Vault-Associate Mock Exam – Practice Online Confidently

Buying Options: