By default, how long does the transit secrets engine store the resulting ciphertext?

• A.24 hours
• B.32 days
• C.transit does not store data
• D.30 days

Comment: *

Name: *

Email: *

Verification: *

In the example below, where is the value of the DNS record's IP address originating from?
1. resource "aws_route53_record" "www" {
2. zone_id = aws_route53_zone.primary.zone_id
3. name = "www.helloworld.com"
4. type = "A"
5. ttl = "300"
6. records = [module.web_server.instance_ip_addr]
7. }

• A.value of the web_server parameter from the variables.tf file
• B.the output of a module named web_server
• C.the regular expression named module.web_server
• D.by querying the AWS EC2 API to retrieve the IP address

Comment: *

Name: *

Email: *

Verification: *

Unsealing Vault creates the encryption keys, which is used to unencrypt the data on the storage backend.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

While Vault provides businesses tons of functionality out of the box, what feature allows you to extend its functionality with solutions written by third-party providers?

• A.vault agent
• B.namespaces
• C.plugin backend
• D.control groups

Comment: *

Name: *

Email: *

Verification: *

When Vault is sealed, which are the only two options available to a Vault administrator? (select two)

• A.rotate the encryption key
• B.unseal Vault
• C.view the status of Vault
• D.configure policies
• E.author security policies
• F.view data stored in the key/value store

Comment: *

Name: *

Email: *

Verification: *