Online Access Free Vault-Associate-002 Exam Questions

Vault supports which type of configuration for source limited token?

• A.Domain-bound tokens
• B.CIDR-bound tokens
• C.Cloud-bound tokens
• D.Certificate-bound tokens

Which of the following describes usage of an identity group?

• A.Limit the policies that would otherwise apply to an entity in the group
• B.Audit token usage
• C.Consistently apply the same set of policies to a collection of entities
• D.When they want to revoke the credentials for a whole set of entities simultaneously

The key/value v2secrets engine is enabled at secret/. See the following policy:

Which of the following operations are permitted by this policy? (Choose two.)

• A.vault kv delete secret/super-secret
• B.vault kv list secret/super-secret
• C.vault kv metadata get secret/webapp1
• D.vault kv get secret/webapp1
• E.vault kv put secret/webapp1 apikey-"ABCDEFGHIDK123W"

Hotspot Question
For the following statements, choose which secrets engine enables the use case.
Each answer should only be used once.

Correct Answer:

An authentication method should be selected for a use case based on:

• A.The cloud provider for which the client is located on
• B.The strongest available cryptographic hash for the use case
• C.The auth method that best establishes the identity of the client
• D.Compatibility with the secret engine which is to be used