Question 1

Which of the following are considered benefits of using policies in Vault? (select three)

Options :

A : provides granular access control to paths within Vault

B : policies have an implicit deny, meaning that policies are deny by default

C : policies provide Vault operators with role-based access control

D : policies are assigned to a token on a 1:1 basis to eliminate conflicting policies

Answer: A,B,C

Question 2

Vault supports multiple platforms for both authentication and secrets generation. Based on the command below, is the user configuring Vault for AWS authentication or AWS secrets generation?

$ vault auth enable aws

Options :

A : secrets generation

B : authentication

C : neither, it-s an invalid command

Answer: B

Question 3

Which of the following Vault features is available only in the Enterprise version? (select three)

Options :

A : MFA

B : dynamic credentials

C : cloud auto unseal

D : replication

E : auto unseal with HSM

Answer: A,D

Question 4

Harry has successfully authenticated to Vault using the UI. To test some commands in the CLI, Harry wants to quickly grab the token assigned to him after logging into the UI. Where can Harry easily retrieve the token?

Options :

A : 1

B : 3

C : 2

D : 4

Answer: D

Question 5

Which command is used to initialize Vault after first starting the Vault service?

Options :

A : vault create key

B : vault operator init

C : vault operator initialize keys

D : vault start

E : vault operator unseal

Answer: B