Question 1

Examine the command below. Output has been trimmed.

Which of the following statements describe the command and its output?

Options :

A : Missing a default token policy

B : Generated token-s TTL is 60 hours

C : Generated token is an orphan token which can be renewed indefinitely

D : Configures the AppRole auth method with user specified role ID and secret ID

Answer: B,C

Question 2

Which of the following token attributes can be used to renew a token in Vault (select two)?

Options :

A : TTL

B : Token ID

C : Identity policy

D : Token accessor

Answer: B,D

Question 3

What is the default maximum time-to-live (TTL) for a token, measured in days?

Options :

A : 32 days (768 hours)

B : 7 days (168 hours)

C : 14 days (336 hours)

D : 31 days (744 hours)

Answer: A

Question 4

True or False? Once the lease for a dynamic secret has expired, Vault revokes the credentials on the backend platform for which they were created (i.e., database, AWS, Kubernetes).

Options :

A : True

B : False

Answer: A

Question 5

Which of these is not a benefit of dynamic secrets?

Options :

A : Supports systems which do not natively provide a method of expiring credentials

B : Minimizes damage of credentials leaking

C : Ensures that administrators can see every password used

D : Replaces cumbersome password rotation tools and practices

Answer: C

Higher Test Marks with Free Online Vault-Associate Exam Practice

Buying Options: