You have enabled the Transit secrets engine on your Vault cluster to provide an "encryption as a service" service as your team develops new applications. What is a prime use case for the Transit secrets engine?

• A.Encrypting data before being written to an Amazon S3 bucket
• B.Storing the encrypted data in Vault for easy retrieval
• C.Generating dynamic SSH credentials for access to local systems
• D.Creating X.509 certificates for a new fleet of containers

Comment: *

Name: *

Email: *

Verification: *

True or False? Performing a rekey operation using the vault operator rekey command creates new unseal
/recovery keys as well as a new root key?

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Tom needs to set the proper environment variable so he doesn't need to first authenticate to Vault toretrieve dynamically generated credentials for a database server. What environment variable does Tom need to set first before running commands?

• A.VAULT_NAMESPACE
• B.VAULT_TOKEN
• C.VAULT_CAPATH
• D.VAULT_CLIENT_KEY

Comment: *

Name: *

Email: *

Verification: *

What is the default TTL for tokens in Vault if one is not specified?

• A.24 hours (1 day)
• B.15 minutes
• C.768 hours (32 days)
• D.60 minutes (1 hour)

Comment: *

Name: *

Email: *

Verification: *

You have TBs of data encrypted by Vault stored in a database and are worried about Vault becoming unavailable and not being able to decrypt the data. Is it possible to export the encryption key to store it somewhere else in the event Vault becomes unavailable?

• A.Yes, as long as the key was configured to be exportable when it was created
• B.No, you cannot export the encryption key from Vault

Comment: *

Name: *

Email: *

Verification: *