What is the correct order that Vault uses to protect data?

• A.root key --> encryption key --> data
• B.unseal keys --> root key --> data
• C.root key --> data
• D.encryption key --> root key --> data

Comment: *

Name: *

Email: *

Verification: *

A user issues the following cURL command to encrypt data using the transit engine and the Vault AP:

Which payload.json file has the correct contents?

• A.
• B.
• C.
• D.

Comment: *

Name: *

Email: *

Verification: *

Over a few years, you have a lot of data that has been encrypted by older versions of a Transit encryption key.
Due to compliance regulations, you have to re-encrypt the data using the newest version of the encryption key. What is the easiest way to complete this task without putting the data at risk?

• A.Rotate the encryption key used to encrypt the data
• B.Decrypt the data manually and encrypt it with the latest version
• C.Use the transit rewrap feature
• D.Create a new master key used by Vault

Comment: *

Name: *

Email: *

Verification: *

Suzy is a Vault user that needs to create and replace values at the path secrets/automation/apps/chef. Does the following policy permit her the permissions to do so?
text
CollapseWrapCopy
path " secrets/automation/apps/chef " {
capabilities = [ " create " , " read " , " list " ]
}

• A.No, the policy would deny Suzy from performing certain actions
• B.Yes, the policy has appropriate permissions

Comment: *

Name: *

Email: *

Verification: *

Short-lived, dynamically generated secrets provide organizations with many benefits. Select the benefits from the options below. (Select four)

• A.Each application instance can generate its own credentials, rather than using a shared credential across all application instances
• B.Credentials only exist when needed
• C.Applications only have access to privileged accounts when needed
• D.Credentials accidentally checked into a code repo or discovered in a text file are likely to be invalid
• E.Dynamic credentials do not change, so legacy applications can easily take advantage of them

Comment: *

Name: *

Email: *

Verification: *