Online Access Free Vault-Associate-002 Exam Questions

Which of the following statements are true about the defaultpolicy? (Choose two.)

• A.Provides a common set of permissions and is included on all tokens by default
• B.Can not be modified or deleted
• C.Vault upgrade will overwrite any update you made to the defaultpolicy
• D.It is one of the built-in policies
• E.Gives a super admin permissions, similar to a root user on a Linux machine

Which of these is not a benefit of dynamic secrets?

• A.Minimizes damage of credentials leaking
• B.Replaces cumbersome password rotation tools and practices
• C.Supports systems which do not natively provide a method of expiring credentials
• D.Ensures that administrators can see every password used

An organization needs to protect sensitive application data currently stored in a database as plaintext. Which secrets engine provides a solution?

• A.Key/Value v2 secrets engine
• B.Cubbyhole secrets engine
• C.Transit secrets engine
• D.Database secrets engine

Which of the following is a reason to rekey a Vault cluster? (Choose two.)

• A.Upgrading Vault Community Edition to Vault Enterprise
• B.A compliance mandate to rotate the master key at a regular interval
• C.The rook token is lost
• D.A keyholder joins or leaves the organization
• E.Adding additional Vault nodes to a cluster

Vault operators can create two types of groups in Vault. What are the two types?

• A.internal groups
• B.user groups
• C.policy groups
• D.external groups
• E.security groups