Question 1

Short-lived, dynamically generated secrets provide organizations with many benefits. Select the benefits from the options below. (select four)

Options :

A : applications only have access to privileged accounts when needed

B : credentials only exist when needed

C : credentials accidentally checked into a code repo or discovered in a text file are likely to be invalid

D : dynamic credentials do not change, so legacy applications can easily take advantage of them

E : each application instance can generate its own credentials, rather than using a shared credential across all application instances

Answer: A,B,C

Question 2

Your organization recently suffered a security breach on a specific application, and the security response team believes that MySQL database credentials were likely obtained during the event. The application generated the credentials using the database secrets engine in Vault mounted the path database/.

How can you quickly revoke all of the secrets generated by this secrets engine?

Options :

A : vault token revoke database/*

B : vault secrets disable mysql

C : vault lease renew database/creds/mysql

D : vault lease revoke -prefix database/

Answer: D

Question 3

What methods of authentication does Vault support? (select four)

Options :

A : AppRole

B : VMware

C : Android

D : GCP

E : LDAP

F : JWT

Answer: A,D

Question 4

Vault operators can create two types of groups in Vault. What are the two types?

Options :

A : external groups

B : user groups

C : policy groups

D : security groups

E : internal groups

Answer: A

Question 5

In regards to using a K/V v2 secrets engine, select the three correct statements below: (select three)

Options :

A : issuing a vault kv destroy statement permanently deletes a single version of a secret

B : issuing a vault kv delete statement permanently deletes the secret

C : issuing a vault kv metadata delete statement permanently deletes the secret

D : issuing a vault kv delete statement performs a soft delete

Answer: A,D

Higher Test Marks with Free Online HCVAO-002 Exam Practice

Buying Options: