Question 1

After issuing the command to delete a secret, you run a vault kv list command, but the path to the secret still seems to exist. What command would permanently delete the path from Vault?

Options :

A : vault kv delete -force kv/applications/app01

B : vault kv destroy -versions=1 kv/applications/app01

C : vault kv metadata delete kv/applications/app01

D : vault kv delete -all kv/applications/app01

Answer: C

Question 2

How long does the Transit secrets engine store the resulting ciphertext by default?

Options :

A : 24 hours

B : 30 days

C : 32 days

D : Transit does not store data

Answer: D

Question 3

Which of the following token attributes can be used to renew a token in Vault (select two)?

Options :

A : TTL

B : Token ID

C : Identity policy

D : Token accessor

Answer: B,D

Question 4

Which of the following is NOT a valid way in which a lease can be revoked in Vault?

Options :

A : Using the user interface (UI)

B : Automatically when the TTL or Max-TTL expires

C : Using the API to call the /v1/sys/leases endpoint

D : Via the CLI using the vault token command

Answer: D

Question 5

Based on the following output, what command can Steve use to determine if the KV store is configured for versioning? text CollapseWrapCopy $ vault secrets list Path Type Accessor Description ---- ---- -------- ----------- automation/ kv kv_56f991b9 Automation team for CI/CD cloud/ kv kv_4426c541 Cloud team for static secrets cubbyhole/ cubbyhole cubbyhole_9bd538e per-token priv secret storage data_team/ kv kv_96d57692 Data warehouse KV for certs identity/ identity identity_0042595e identity store network/ kv kv_3e53aaab Network team secret storage secret/ kv kv_d66e2adc key/value secret storage sys/ system system_d6f218a9 system endpoints

Options :

A : vault secrets list -all

B : vault kv get automation

C : vault secrets list -detailed

D : vault kv list

Answer: C