HashiCorp Vault-Associate Quiz 1 Topic 1 Questions 1-5

Question: 1

You are using the Vault userpass auth method mounted at auth/userpass. How do you create a new user named "sally" with password "h0wN0wB4r0wnC0w"? This new user will need the power-users policy.

A.

q1_Vault-Associate

B.

q1_Vault-Associate

C.

q1_Vault-Associate

D.

q1_Vault-Associate

AOption A

BOption B

COption C

DOption D

Show Answer

Question: 2

You are using Vault's Transit secrets engine to encrypt your dat

a. You want to reduce the amount of content encrypted with a single key in case the key gets compromised. How would you do this?

AUse 4096-bit RSA key to encrypt the data

BUpgrade to Vault Enterprise and integrate with HSM

CPeriodically re-key the Vault's unseal keys

DPeriodically rotate the encryption key

Show Answer

Question: 3

As a best practice, the root token should be stored in which of the following ways?

AShould be revoked and never stored after initial setup

BShould be stored in configuration automation tooling

CShould be stored in another password safe

DShould be stored in Vault

Show Answer

Question: 4

What are orphan tokens?

AOrphan tokens are tokens with a use limit so you can set the number of uses when you create them

BOrphan tokens are not children of their parent; therefore, orphan tokens do not expire when their parent does

COrphan tokens are tokens with no policies attached

DOrphan tokens do not expire when their own max TTL is reached

Show Answer

Question: 5

Your DevOps team would like to provision VMs in GCP via a CICD pipeline. They would like to integrate Vault to protect the credentials used by the tool. Which secrets engine would you recommend?

AGoogle Cloud Secrets Engine

BIdentity secrets engine

CKey/Value secrets engine version 2

DSSH secrets engine

Show Answer

HashiCorp Vault-Associate Quiz:1 Topic:1 Questions:1-5