Question 1

Coffee Cups, Inc is integrating its legacy application with Vault to improve its security. However, the Vault operations team discovered that the application has issues when the token changes for authentication during testing.

What type of token could be used to help alleviate this issue without compromising security?

Options :

A : Root Token

B : Periodic Service Token

C : Batch Token

D : Orphan Service Token

Answer: B

Question 2

Harry has successfully authenticated to Vault using the UI. To test some commands in the CLI, Harry wants to quickly grab the token assigned to him after logging into the UI. Where can Harry easily retrieve the token?

Options :

A : 1

B : 3

C : 2

D : 4

Answer: D

Question 3

What is the Consul Agent?

Options :

A : a process that registers services with Consul

B : an agent that runs in the background to provide additional features for Consul

C : the core process of Consul which maintains membership information, manages services, runs checks, responds to queries, and more.

D : a daemon that Vault uses to register auth methods across all of its clusters to ensure consistency among the data written to disk

Answer: C

Question 4

Frapps, Inc. is a new coffee startup in Boston that specializes in frozen caffeinated drinks. Their new web app for customer loyalty uses Vault to store all sensitive information. During the Vault design, they chose to use Integrated Storage due to all of its benefits.

Select the benefits the organization would see by using Integrated Storage over other storage backends (select four)

Options :

A : simplified troubleshooting since Integrated Storage is a built-in solution

B : eliminates network communication between hosts, requiring no open ports between hosts

C : reduces operational overhead since all configuration is within Vault itself

D : immediate access to storage since the data is stored locally on disk

E : uses the SERF gossip protocol to enable communication between cluster nodes

F : eliminates the requirement to deploy and manage a separate platform for storing encrypted data

Answer: A,C,D

Question 5

After configuring Consul ACLs and issuing the tokens associated with the Vault policies, you've discovered that anybody can still access the Consul UI and browse and delete data on the KV store. Based on the configuration below, on which line does a configuration change need to be made in order to correct this?

Options :

A : 4

B : 2

C : 5

D : 1

E : 3

Answer: A