Question 1

Which of the following policies would permit a user to generate dynamic credentials on a database?

Options :

A : path "database/creds/read_only_role" { capabilities = ["generate"] }

B : path "database/creds/read_only_role" { capabilities = ["update"] }

C : path "database/creds/read_only_role" { capabilities = ["list"] }

D : path "database/creds/read_only_role" { capabilities = ["read"] }

Answer: D

Question 2

You want to encrypt a credit card number using the Transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned? $ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121" Error: * illegal base64 data at input byte 4

Options :

A : The plain text data needs to be encoded to base64

B : The token used to issue the encryption request does not have the appropriate permissions

C :

Credit card numbers are not supported using the Transit secrets engine since it is considered sensitive data

D : The credit card number should not include spaces

Answer: A

Question 3

True or False? A token can be renewed up until the max TTL, even if the TTL has been reached.

Options :

A : True

B : False

Answer: B

Question 4

What is the proper command to enable the AWS secrets engine at the default path?

Options :

A : vault enable aws secrets engine

B : vault secrets enable aws

C : vault secrets aws enable

D : vault enable secrets aws

Answer: B

Question 5

Thomas has authenticated to Vault using the API and has received the following response. What datamust Thomas parse from the response in order to continue making requests to Vault?textCollapseWrapCopy{"request_id": "65897160-fd8b-1f87-c24e-fdba14c9728e","lease_id": "","renewable": false,"lease_duration": 0,"data": null,"wrap_info": null,"warnings": null,"auth": {"client_token": "hvss.lzrmRe5Y3LMcDRmOttEjWoagd92fD29fxakwej_38djs","accessor": "EMX0nv4nr0Y1wXoaN7i0WDW1","policies": ["bryan", "default"],"token_policies": ["bryan", "default"],"metadata": {"username": "bryan"},"lease_duration": 2764800,"renewable": true,"entity_id": "40e203e8-818e-b6ad-4cb3-0befdbf9b598","token_type": "service", "orphan": true}}

Options :

A : accessor

B : request_id

C : client_token

D : entity_id

Answer: C

Confidently Practice Online with Free Vault-Associate Exam Cram

Buying Options: