Question 1

Where can you set the Vault seal configuration? Choose two correct answers.

Options :

A : Cloud Provider KMS

B : Vault CLI

C : Vault configuration file

D : Environment variables

E : Vault API

Answer: C,D

Question 2

True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

Options :

A : True

B : False

Answer: B

Question 3

As a best practice, the root token should be stored in which of the following ways?

Options :

A : Should be revoked and never stored after initial setup

B : Should be stored in configuration automation tooling

C : Should be stored in another password safe

D : Should be stored in Vault

Answer: A

Question 4

During a service outage, you must ensure all current tokens and leases are copied to another Vault cluster for failover so applications don't need to authenticate. How can you accomplish this?

Options :

A : Have Vault write all the tokens and leases to a file so you have a second copy of them

B : Configure all applications to use the auto-auth feature of the Vault Agent

C : Configure Disaster Recovery replication and promote the secondary cluster during an outage

D : Replicate to another cluster using Performance Replication and promote the secondary cluster during an outage

Answer: C

Question 5

True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

Options :

A : True

B : False

Answer: B

Free Vault-Associate Mock Exam – Practice Online Confidently

Buying Options: