You've decided to use AWS KMS to automatically unseal Vault on private EC2 instances. After deploying your Vault cluster, and running vault operator init, Vault responds with an error and cannot be unsealed.
You've determined that the subnet you've deployed Vault into doesn't have internet access. What can you do to enable Vault to communicate with AWS KMS in the most secure way?

• A.ask the networking team to provide Vault with inbound access from the internet
• B.deploy Vault in a public subnet and provide the Vault nodes with public IP addresses
• C.add a VPC endpoint
• D.change the permissions on the Internet Gateway to allow the Vault nodes to communicate over the Internet

Comment: *

Name: *

Email: *

Verification: *

Terraform has detailed logs which can be enabled by setting the _________ environmental variable.

• A.TF_LOG
• B.TF_TRACE
• C.TF_DEBUG
• D.TF_INFO

Comment: *

Name: *

Email: *

Verification: *

After issuing the command to delete a secret, you run a vault kv list command but the secret still exists. What command would permanently delete this secret from Vault?
1. $ vault kv delete kv/applications/app01
2. Success! Data deleted (if it existed) at: kv/applications/app01
3. $ vault kv list kv/applications
4. Keys
5. ----
6. app01

• A.vault kv metadata delete kv/applications/app01
• B.vault kv delete -all kv/applications/app01
• C.vault kv delete -force kv/applications/app01
• D.vault kv destroy -versions=1 kv/applications/app01

Comment: *

Name: *

Email: *

Verification: *

Select the two default policies created in Vault. (select two)

• A.default
• B.vault
• C.base
• D.root
• E.admin
• F.user

Comment: *

Name: *

Email: *

Verification: *

Which of the following commands will remove all secrets at a specific path?

• A.vault lease revoke -prefix <path>
• B.vault delete lease -all <path>
• C.vault lease revoke -all <path>
• D.vault revoke -all <path>

Comment: *

Name: *

Email: *

Verification: *