Which of the following auth methods are intended for machine-to-machine authentication, and not necessarily human (operator) authentication? (Select four)

• A.Okta
• B.Tokens
• C.TLS Certificates
• D.Cloud-based Auth methods (AWS, Azure, GCP)
• E.LDAP
• F.AppRole

Comment: *

Name: *

Email: *

Verification: *

Which of the following secrets engines can store static secrets in Vault for future retrieval?

• A.KV
• B.PKI (certificates)
• C.Database
• D.Transit

Comment: *

Name: *

Email: *

Verification: *

Tom is authenticating to Vault using the CLI. Which of the following commands allows Tom to authenticate using the userpass method WITHOUT logging his password to the shell history?

• A.vault login tom
• B.vault login -method=userpass username=tom
• C.vault login userpass username=tom password=jerry
• D.vault login -method=userpass username=tom password=jerry

Comment: *

Name: *

Email: *

Verification: *

A Fintech company is using Vault to store its static long-lived credentials so automated processes can quickly retrieve secrets. A user needs to add a new static secret for a new automated job. What CLI commands can be used to store a new static credential? (Select two)

• A.vault kv put kv/training/certification/vault @secrets.txt
• B.vault kv write kv/training/certification/vault key=username value=bryan
• C.vault kv create kv/training/certification/vault @secrets.txt
• D.vault kv put -mount=secret creds passcode=my-long-passcode

Comment: *

Name: *

Email: *

Verification: *

Assuming default configurations, which of the following operations require a threshold of key shares to perform? (Select three)

• A.Rotating the Vault encryption key to adhere to internal security policies
• B.Unsealing Vault after a scheduled maintenance to install patches
• C.Generating a new root token as a break-glass procedure
• D.Creating a new set of recovery keys due to an employee leaving the organization

Comment: *

Name: *

Email: *

Verification: *