Question 25
- (Topic 2)
Which of the following unseal options can automatically unseal Vault upon the start of the Vault service? (Select four)
Correct Answer:ABCD
Question 26
- (Topic 4)
A large organization uses Vault for various use cases with multiple auth methods enabled. A user can authenticate via LDAP, OIDC, or a local userpass account, but they receive different policies for each method and often need to log out and back in for different actions. What can be configured in Vault to ensure users have consistent policies regardless of their authentication method?
Correct Answer:B
Question 27
- (Topic 2)
Mike??s Cereal Shack uses Vault to encrypt customer data to ensure it is always stored securely. They are developing a new application integration to send new customer data to be encrypted using the following API request: text
CollapseWrapCopy
$ curl
--header "X-Vault-Token: hvs.sf4vj1rFV5PvQSV3M9dcv832brxQFsfbXA"
--request POST
--data @data.json https://vault.mcshack.com:8200/v1/transit/encrypt/customer-data What would be contained within the data.json file?
Correct Answer:D
Question 28
- (Topic 5)
Which of the following is a machine-oriented Vault authentication backend?
Correct Answer:B
Question 29
- (Topic 4)
True or False? After rotating a transit encryption key, all data encrypted with the previous version must be rewrapped or re-encrypted with the new key.
Correct Answer:B
Question 30
- (Topic 4)
You have logged into the Vault UI and see this screen. What Vault component is being enabled in the screenshot below?
Correct Answer:B