最新的HashiCorp Certified: Vault Associate (002) - Vault-Associate-002免費考試真題

A. A secrets engine cannot be enabled at multiple paths

B. Once enabled, you cannot disable the secrets engine

C. You can build your own custom secrets engine

D. Some secrets engines simply store and read data

E. Each secrets engine is isolated to its path

A. Provides a common set of permissions and is included on all tokens by default

B. Vault upgrade will overwrite any update you made to the defaultpolicy

C. It is one of the built-in policies

D. Can not be modified or deleted

E. Gives a super admin permissions, similar to a root user on a Linux machine

A. None of the above

B.

C.

D.

A. CIDR-bound tokens

B. Domain-bound tokens

C. Cloud-bound tokens

D. Certificate-bound tokens

A. False

B. True

A. Only the reference to the secrets is transmitted over the public network

B. It protects Vault's master key

C. Limits the time of secret exposure by having a short-lived wrapping token

D. Allow versioning of the secrets

E. Limits the size of secrets to be transmitted over the network

A. False

B. True

A. vault lookup self

B. vault lookup token

C. vault token lookup

D. vault self lookup

A. When they want to revoke the credentials for a whole set of entities simultaneously

B. Limit the policies that would otherwise apply to an entity in the group

C. Consistently apply the same set of policies to a collection of entities

D. Audit token usage

A. vault kv put secret/my-secrets my-password-53cr3t

B. vault kv write secret/my-secrets/my-password 53cr3t

C. vault kv put secret/my-secrets/my-password 53cr3t

D. vault kv write 53cr3t my-secrets/my-password