Mike's Cereal Shack uses Vault to encrypt customer data to ensure it is always stored securely. They are developing a new application integration to send new customer data to be encrypted using the following API request:
text
CollapseWrapCopy
$ curl \
--header " X-Vault-Token: hvs.sf4vj1rFV5PvQSV3M9dcv832brxQFsfbXA " \
--request POST \
--data @data.json \
https://vault.mcshack.com:8200/v1/transit/encrypt/customer-data
What would be contained within the data.json file?

• A.Transit secrets engine configuration file
• B.Ciphertext to be decrypted
• C.The encryption key to be used for encrypting the data
• D.Cleartext customer data to be encrypted

Comment: *

Name: *

Email: *

Verification: *

Where do you define the Namespace to log into using the Vault Ul?
To answer this question
Use your mouse to click on the screenshot in the location described above. An arrow indicator will mark where you have clicked. Click the "Answer" button once you have positioned the arrow to answer the question. You may need to scroll down to see the entire screenshot.

Correct Answer:

Explanation:
The namespace can be defined in the "Mount path" field in the "Advanced options" section of the login screen. The mount path is the path where the auth method is enabled, and it can include a namespace prefix.
For example, if the LDAP auth method is enabled at the path ns1/auth/ldap, where ns1 is the namespace, then the mount path field should be set to ns1/auth/ldap. This way, the Vault UI will log in to the correct namespace and auth method. Alternatively, the namespace can also be specified in the URL of the Vault UI, such as https://vault.example.com/ui/vault/auth/ns1/auth/ldap/login.

Comment: *

Name: *

Email: *

Verification: *

True or False? All Vault policies are deny by default.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

You have a requirement that an application needs to implement AES encryption.
What parameter must you use to meet this requirement when defining a new key in a Transit secrets engine for this app?

• A.exportable
• B.convergent_encryption
• C.type
• D.name

Comment: *

Name: *

Email: *

Verification: *

True or False? The following policy permits a user to read secrets contained in the path secrets/cloud/apps
/jenkins?
text
CollapseWrapCopy
path "secrets/cloud/apps/jenkins/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *