Given the following screenshot, how many secrets engines have been enabled?
Answer(s): B
The Cubbyhole secret engine is a default secrets engine that is enabled by default for each Vault user.
True or False: When encrypting data with the transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.
Answer(s): A
Vault doesn't store the data sent to the secrets engine. The transit secrets engine handles cryptographic functions on data-in-transit. It can also be viewed as "cryptography as a service" or "encryption as a service". The transit secrets engine can also sign and verify data; generate hashes and HMACs of data; and act as a source of random bytes.
https://www.vaultproject.io/docs/secrets/transit
When administering Vault on a day-to-day basis, why is logging in with the root token, as shown below, a bad idea? (select two).
Answer(s): B,C
The root token should never be used on a day-to-day basis and should always be revoked once a permanent auth method has been configured.
In regards to using a K/V v2 secrets engine, select the three correct statements below: (select three)
Answer(s): A,D,E
The kv delete command is like a soft delete which deletes the data for the provided path in the key/value secrets engine. If using K/V Version 2, its versioned data will not be fully removed, but marked as deleted and will no longer be available for normal get requests. The kv destroy command permanently removes the specified versions' data from the key/value secrets engine. If no key exists at the path, no action is taken. It does not deletes all versions of a secret.The kv metadata delete command deletes all versions and metadata for the provided key.
Post your Comments and Discuss HashiCorp VA-002-P exam with other Community members:
Bruno commented on October 10, 2023 PDF is Vault, EXM is Teraform. UNITED STATES upvote
Our website is free, but we have to fight against bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the VA-002-P content, but please register or login to continue.