Question 1

You are planning to deploy a new Vault cluster for your organization and notice that Vault supports a wide variety of storage backends. You need high availability since you will have multiple applications relying on the Vault service. When building your cluster, can you choose any of the available storage backends?

Options :

A : Yes, because all backends provide similar functionality

B : No, because not all storage backends provide similar functionality

Answer: B

Question 2

Which of these is not a benefit of dynamic secrets?

Options :

A : Supports systems which do not natively provide a method of expiring credentials

B : Minimizes damage of credentials leaking

C : Ensures that administrators can see every password used

D : Replaces cumbersome password rotation tools and practices

Answer: C

Question 3

True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

Options :

A : True

B : False

Answer: B

Question 4

How long does the Transit secrets engine store the resulting ciphertext by default?

Options :

A : 24 hours

B : 30 days

C : 32 days

D : Transit does not store data

Answer: D

Question 5

As a best practice, the root token should be stored in which of the following ways?

Options :

A : Should be revoked and never stored after initial setup

B : Should be stored in configuration automation tooling

C : Should be stored in another password safe

D : Should be stored in Vault

Answer: A

Free Vault-Associate Mock Exam – Practice Online Confidently

Buying Options: