Question 1

Where can you set the Vault seal configuration? Choose two correct answers.

Options :

A : Cloud Provider KMS

B : Vault CLI

C : Vault configuration file

D : Environment variables

E : Vault API

Answer: C,D

Question 2

What is the default maximum time-to-live (TTL) for a token, measured in days?

Options :

A : 32 days (768 hours)

B : 7 days (168 hours)

C : 14 days (336 hours)

D : 31 days (744 hours)

Answer: A

Question 3

What is the proper command to enable the AWS secrets engine at the default path?

Options :

A : vault enable aws secrets engine

B : vault secrets enable aws

C : vault secrets aws enable

D : vault enable secrets aws

Answer: B

Question 4

During a service outage, you must ensure all current tokens and leases are copied to another Vault cluster for failover so applications don't need to authenticate. How can you accomplish this?

Options :

A : Have Vault write all the tokens and leases to a file so you have a second copy of them

B : Configure all applications to use the auto-auth feature of the Vault Agent

C : Configure Disaster Recovery replication and promote the secondary cluster during an outage

D :

Replicate to another cluster using Performance Replication and promote the secondary cluster during an outage

Answer: C

Question 5

Thomas has authenticated to Vault using the API and has received the following response. What data

must Thomas parse from the response in order to continue making requests to Vault?

text

CollapseWrapCopy

{

"request_id": "65897160-fd8b-1f87-c24e-fdba14c9728e",

"lease_id": "",

"renewable": false,

"lease_duration": 0,

"data": null,

"wrap_info": null,

"warnings": null,

"auth": {

"client_token": "hvss.lzrmRe5Y3LMcDRmOttEjWoagd92fD29fxakwej_38djs",

"accessor": "EMX0nv4nr0Y1wXoaN7i0WDW1",

"policies": ["bryan", "default"],

"token_policies": ["bryan", "default"],

"metadata": {"username": "bryan"},

"lease_duration": 2764800,

"renewable": true,

"entity_id": "40e203e8-818e-b6ad-4cb3-0befdbf9b598",

"token_type": "service",

"orphan": true

}

Options :

A : accessor

B : request_id

C : client_token

D : entity_id

Answer: C

Confidently Practice Online with Free Vault-Associate Exam Cram

Buying Options: