Frapps, Inc. is a coffee startup specializing in frozen caffeinated beverages. Their new customer loyalty web app uses Vault to store sensitive information, choosing Integrated Storage for its benefits. Select the benefits the organization would see by using Integrated Storage over other storage backends (Select four)

• A.Eliminates network communication between hosts, requiring no open ports between hosts
• B.Uses the SERF gossip protocol to enable communication between cluster nodes
• C.Eliminates the requirement to deploy and manage a separate platform for storing encrypted data
• D.Simplified troubleshooting since Integrated Storage is a built-in solution
• E.Reduces operational overhead since all configuration is within Vault itself
• F.Immediate access to storage since the data is stored locally on disk

Comment: *

Name: *

Email: *

Verification: *

You need to write a new policy for Vault for a group of users on the automation team. The requirements stipulate that each user (and all future users) get access to their own private section of a KV secrets engine at the path kv/team/ and be able to manage their own secrets. Which policy below meets these requirements while minimizing the administrative effort and following the principle of least privilege?

• A.path "secret/data/groups/{{identity.groups.ids.2f62-9503-42aa7A869741.name}}/" { capabilities =
  ["list"] }
• B.path "kv/team/frank/" { capabilities = ["create", "update", "read", "delete"] } path "kv/team/steve/" { capabilities = ["create", "update", "read", "delete"] } path "kv/team/bryan/" { capabilities = ["create",
  "update", "read", "delete"] }
• C.path "kv/team/" { capabilities = ["create", "update", "read", "delete"] }
• D.path "kv/team/{{identity.entity.id}}/" { capabilities = ["create", "update", "read", "delete"] } path "kv
  /team/{{identity.entity.id}}" { capabilities = ["create", "update", "read", "delete"] }

Comment: *

Name: *

Email: *

Verification: *

What is the result of the following Vault command?
$ vault auth enable kubernetes

• A.Allows Vault to access usernames and passwords stored in a Kubernetes cluster
• B.Mounts the Kubernetes auth method to the default path of kubernetes/
• C.Imports Kubernetes secrets to the local KV database
• D.Enables Vault to host an IdP for Kubernetes workloads

Comment: *

Name: *

Email: *

Verification: *

What command can be used to revoke all leases associated with a database role named prod-mysql?

• A.vault lease revoke database/role/prod-mysql
• B.vault lease revoke -prefix database/creds/prod-mysql
• C.vault revoke database/role/prod-mysql
• D.vault lease revoke database/creds/prod-mysql

Comment: *

Name: *

Email: *

Verification: *

True or False? The command vault lease revoke -prefix aws/ will revoke all leases associated with the secret engine mounted at /aws.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *