Vault-Associate 試験問題を無料オンラインアクセス

What does the following policy do?

• A.Grants access for each user to a KV folder which shares their id
• B.Nothing, this is not a valid policy
• C.Allows a user to read data about the secret endpoint identity
• D.Grants access to a special system entity folder

You are performing a high number of authentications in a short amount of time. You're experiencing slow throughput for token generation. How would you solve this problem?

• A.Increase the time-to-live on service tokens
• B.Establish a rate limit quota
• C.Reduce the number of policies attached to the tokens
• D.Implement batch tokens

Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?

• A.PKI
• B.Cloud KMS
• C.Transit
• D.Key/Value secrets engine version 2, with TTL defined

A developer mistakenly committed code that contained AWS S3 credentials into a public repository. You have been tasked with revoking the AWS S3 credential that was in the code. This credential was created using Vault's AWS secrets engine and the developer received the following output when requesting a credential from Vault.

Which Vault command will revoke the lease and remove the credential from AWS?

• A.vault lease revoke f3e92392-7d9c-O9c8-c921-575d62fe80d8
• B.vault lease revoke AKIAI0WQXTLW36DV7IEA
• C.vault lease revoke aws/creds/s3-access/f3e92392-7d9c-99c8-c921-57Sd62fe89d8
• D.vault lease revoke access_key-AKIAI0WQXTLW36DV7IEA

Where can you set the Vault seal configuration? Choose two correct answers.

• A.Vault CLI
• B.Cloud Provider KMS
• C.Vault API
• D.Vault configuration file
• E.Environment variables