Vault-Associate 무료 덤프문제 온라인 액세스

How would you describe the value of using the Vault transit secrets engine?

• A.The transit secrets engine relieves the burden of proper encryption/decryption from application developers and pushes the burden onto the operators of Vault
• B.Encryption for application data is best handled by a storage system or database engine, while storing encryption keys in Vault
• C.The transit secrets engine ensures encryption in-transit and at-rest is enforced enterprise wide
• D.Vault has an API that can be programmatically consumed by applications

Which of these is not a benefit of dynamic secrets?

• A.Minimizes damage of credentials leaking
• B.Replaces cumbersome password rotation tools and practices
• C.Supports systems which do not natively provide a method of expiring credentials
• D.Ensures that administrators can see every password used

What does the following policy do?

• A.Grants access for each user to a KV folder which shares their id
• B.Grants access to a special system entity folder
• C.Nothing, this is not a valid policy
• D.Allows a user to read data about the secret endpoint identity

Which of the following statements describe the secrets engine in Vault? Choose three correct answers.

• A.Each secrets engine is isolated to its path
• B.Once enabled, you cannot disable the secrets engine
• C.A secrets engine cannot be enabled at multiple paths
• D.Some secrets engines simply store and read data
• E.You can build your own custom secrets engine

Security requirements demand that no secrets appear in the shell history. Which command does not meet this requirement?

• A.vault kv put secret/password [email protected]
• B.vault kv put secret/password value-itsasecret
• C.generate-password | vault kv put secret/password value
• D.vault kv put secret/password value-SSECRET_VALUE