Question 1

Vault supports multiple platforms for both authentication and secrets generation. Based on the command below, is the user configuring Vault for AWS authentication or AWS secrets generation?

$ vault auth enable aws

Options :

A : secrets generation

B : authentication

C : neither, it-s an invalid command

Answer: B

Question 2

What is the Consul Agent?

Options :

A : a process that registers services with Consul

B : an agent that runs in the background to provide additional features for Consul

C : the core process of Consul which maintains membership information, manages services, runs checks, responds to queries, and more.

D : a daemon that Vault uses to register auth methods across all of its clusters to ensure consistency among the data written to disk

Answer: C

Question 3

Which of the following Vault features is available only in the Enterprise version? (select three)

Options :

A : MFA

B : dynamic credentials

C : cloud auto unseal

D : replication

E : auto unseal with HSM

Answer: A,D

Question 4

Below is a list of parent and child tokens and their associated TTL. Which token(s) will be revoked first?

├───s.y4fUERqCtUV0xsQjWLJar5qX - TTL: 4 hours

├───s.FNiIFU14RUxxUYAl4ErLfPVR - TTL: 6 hours

├───s.Jw9LMpu7oCQgxiKbjfyzyg75 - TTL: 4 hours

├───s.3IrlhEvcerEGbae11YQf9FvI - TTL: 3 hours

├───s.hOpweMVFvqfvoVnNgvZq8jLS - TTL: 5 hours

Options :

A :

only s.Jw9LMpu7oCQgxiKbjfyzyg75

B :

only s.3IrlhEvcerEGbae11YQf9FvI

C : both s.3IrlhEvcerEGbae11YQf9FvI and s.hOpweMVFvqfvoVnNgvZq8jLS

D : both s.3IrlhEvcerEGbae11YQf9FvI and s.Jw9LMpu7oCQgxiKbjfyzyg75

Answer: C

Question 5

What methods of authentication does Vault support? (select four)

Options :

A : AppRole

B : VMware

C : Android

D : GCP

E : LDAP

F : JWT

Answer: A,D