Question 1

After logging into the Vault UI, a user complains that they cannot enable Replication. Why would the replication configuration be missing?

Options :

A : replication wasn't configured in the Vault configuration file

B : replication hasn't been enabled

C : Vault is running an open-source version

D : replication configuration isn't available in the UI

Answer: C

Question 2

Coffee Cups, Inc is integrating its legacy application with Vault to improve its security. However, the Vault operations team discovered that the application has issues when the token changes for authentication during testing.

What type of token could be used to help alleviate this issue without compromising security?

Options :

A : Root Token

B : Periodic Service Token

C : Batch Token

D : Orphan Service Token

Answer: B

Question 3

What methods of authentication does Vault support? (select four)

Options :

A : AppRole

B : VMware

C : Android

D : GCP

E : LDAP

F : JWT

Answer: A,D

Question 4

If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?

path "secret/apps/*" {

capabilities = ["create", "read", "update", "delete", "list"]

}

Options :

A :

path "secret/apps/confidential" {

capabilities = ["deny"]

}

B :

path "secret/*" {

capabilities = ["read", "deny"]

}

C :

path "secret/apps/*" {

capabilities = ["deny"]

}

D :

path "secret/apps/confidential/*" {

capabilities = ["deny"]

}

Answer: A

Question 5

Which of the following best describes a token accessor?

Options :

A : . a value that acts as a reference to a token which can be used to perform limited actions against the token

B : a token used for Consul to access Vault auth methods

C : describes the value associated with the tokens TTL

D : a value that describes which clients have access to the attached token

Answer: A