Question 1

Your organization has applications in a primary data center and a secondary warm-standby site. You want to configure Vault replication between the primary and secondary clusters. If the primary fails over to the secondary, the applications must interact with Vault without re-authenticating. What type of Vault replication would you use?

Options :

A : Performance Replication

B : Integrated Storage

C : Disaster Recovery Replication

D : Vault Secrets Operator

Answer: C

Question 2

How long does the Transit secrets engine store the resulting ciphertext by default?

Options :

A : 24 hours

B : 30 days

C : 32 days

D : Transit does not store data

Answer: D

Question 3

True or False? The Vault Secrets Operator does NOT encrypt client cache, such as Vault tokens and leases, by default in Kubernetes Secrets.

Options :

A : True

B : False

Answer: A

Question 4

Which of the following features are not available in the Vault Community version?

Options :

A : Cloud KMS auto-unseal

B : Single sign-on support

C : Event notifications and filtering

D : Multi-factor authentication (auth)

E : Dynamic secrets engines

F : HSM auto-unseal

Answer: F

Question 5

Which of the following is NOT a valid way in which a lease can be revoked in Vault?

Options :

A : Using the user interface (UI)

B : Automatically when the TTL or Max-TTL expires

C : Using the API to call the /v1/sys/leases endpoint

D : Via the CLI using the vault token command

Answer: D