True or False? A token can be renewed up until the max TTL, even if the TTL has been reached.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

You want to encrypt a credit card number using the Transit secrets engine. You enter the following command and receive an error. What can you do to ensure that the credit card number is properly encrypted and the ciphertext is returned?
$ vault write -format=json transit/encrypt/creditcards plaintext="1234 5678 9101 1121" Error: * illegal base64 data at input byte 4

• A.The plain text data needs to be encoded to base64
• B.The token used to issue the encryption request does not have the appropriate permissions
• C.Credit card numbers are not supported using the Transit secrets engine since it is considered sensitive data
• D.The credit card number should not include spaces

Comment: *

Name: *

Email: *

Verification: *

What command creates a secret with the key "my-password" and the value "53cr3t" at path "my-secrets" within the KV secrets engine mounted at "secret"?

• A.vault kv put secret/my-secrets/my-password 53cr3t
• B.vault kv write secret/my-secrets/my-password 53cr3t
• C.vault kv write 53cr3t my-secrets/my-password
• D.vault kv put secret/my-secrets my-password-53cr3t

Comment: *

Name: *

Email: *

Verification: *

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault's AWS secrets engine and the developer received the following output when requesting a credential from Vault.

Which Vault command will revoke the lease and remove the credential from AWS?

• A.vault lease revoke aws/creds/s3-access/f3e92392-7d9c-99c8-c921-57Sd62fe89d8
• B.vault lease revoke AKIAI0WQXTLW36DV7IEA
• C.vault lease revoke f3e92392-7d9c-O9c8-c921-575d62fe80d8
• D.vault lease revoke access_key-AKIAI0WQXTLW36DV7IEA

Comment: *

Name: *

Email: *

Verification: *

How would you describe the value of using the Vault transit secrets engine?

• A.Vault has an API that can be programmatically consumed by applications
• B.The transit secrets engine ensures encryption in-transit and at-rest is enforced enterprise wide
• C.Encryption for application data is best handled by a storage system or database engine, while storing encryption keys in Vault
• D.The transit secrets engine relieves the burden of proper encryption/decryption from application developers and pushes the burden onto the operators of Vault

Comment: *

Name: *

Email: *

Verification: *