Which TCP port does Vault replication use?

• A.8200
• B.8201
• C.8300
• D.8301

Comment: *

Name: *

Email: *

Verification: *

Which Terraform command will check and report errors within modules, attribute names, and value types to make sure they are syntactically valid and internally consistent?

• A.terraform format
• B.terraform validate
• C.terraform fmt
• D.terraform show

Comment: *

Name: *

Email: *

Verification: *

Which of the following secrets engine can generate dynamic credentials? (select three)

• A.Azure
• B.database
• C.key/value
• D.Transit
• E.AWS

Comment: *

Name: *

Email: *

Verification: *

You've decided to use AWS KMS to automatically unseal Vault on private EC2 instances. After deploying your Vault cluster, and running vault operator init, Vault responds with an error and cannot be unsealed.
You've determined that the subnet you've deployed Vault into doesn't have internet access. What can you do to enable Vault to communicate with AWS KMS in the most secure way?

• A.ask the networking team to provide Vault with inbound access from the internet
• B.deploy Vault in a public subnet and provide the Vault nodes with public IP addresses
• C.add a VPC endpoint
• D.change the permissions on the Internet Gateway to allow the Vault nodes to communicate over the Internet

Comment: *

Name: *

Email: *

Verification: *

From the unseal options listed below, select the options you can use if you're deploying Vault on-premises. (select four)

• A.transit
• B.AWS KMS
• C.certificates
• D.key shards
• E.HSM PKCS11

Comment: *

Name: *

Email: *

Verification: *