Select the two paths below that would be permitted for read access based on the following Vault policy:
path " secret/+/training/* " {
capabilities = [ " create " , " read " ]
}

• A.secret/business/training
• B.secret/cloud/training/test/exam
• C.secret/departments/certification/api
• D.secret/departments/training/vault

Comment: *

Name: *

Email: *

Verification: *

An organization wants to authenticate an AWS EC2 virtual machine with Vault to access a dynamic database secret. The only authentication method which they can use in this case is AWS.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of these is not a benefit of dynamic secrets?

• A.Supports systems which do not natively provide a method of expiring credentials
• B.Minimizes damage of credentials leaking
• C.Ensures that administrators can see every password used
• D.Replaces cumbersome password rotation tools and practices

Comment: *

Name: *

Email: *

Verification: *

How would you describe the value of using the Vault transit secrets engine?

• A.Vault has an API that can be programmatically consumed by applications
• B.The transit secrets engine ensures encryption in-transit and at-rest is enforced enterprise wide
• C.Encryption for application data is best handled by a storage system or database engine, while storing encryption keys in Vault
• D.The transit secrets engine relieves the burden of proper encryption/decryption from application developers and pushes the burden onto the operators of Vault

Comment: *

Name: *

Email: *

Verification: *

True or False? All dynamic secrets in Vault are required to have a lease.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *