True or False? After rotating a transit encryption key, all data encrypted with the previous version must be rewrapped or re-encrypted with the new key.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a machine-oriented Vault authentication backend?

• A.Okta
• B.AppRole
• C.Transit
• D.GitHub

Comment: *

Name: *

Email: *

Verification: *

Your application cannot manage authentication with Vault, but it can communicate with a local service to retrieve secrets. What solution can enable your app to generate dynamic credentials from Vault?

• A.Vault Proxy with caching feature enabled
• B.Vault Agent with environment variable secret injection
• C.Vault Proxy with Auto-Auth feature enabled
• D.Vault Agent with the templating feature configured

Comment: *

Name: *

Email: *

Verification: *

Based on the following output, what command can Steve use to determine if the KV store is configured for versioning?
text
CollapseWrapCopy
$ vault secrets list
Path Type Accessor Description
---- ---- -------- -----------
automation/ kv kv_56f991b9 Automation team for CI/CD
cloud/ kv kv_4426c541 Cloud team for static secrets
cubbyhole/ cubbyhole cubbyhole_9bd538e per-token priv secret storage
data_team/ kv kv_96d57692 Data warehouse KV for certs
identity/ identity identity_0042595e identity store
network/ kv kv_3e53aaab Network team secret storage
secret/ kv kv_d66e2adc key/value secret storage
sys/ system system_d6f218a9 system endpoints

• A.vault secrets list -all
• B.vault kv get automation
• C.vault secrets list -detailed
• D.vault kv list

Comment: *

Name: *

Email: *

Verification: *

You have logged into the Vault UI and see this screen. What Vault component is being enabled in the screenshot below?

• A.Storage Backends
• B.Secrets Engine
• C.Auth Methods
• D.Audit Devices

Comment: *

Name: *

Email: *

Verification: *