HashiCorp HCVA0-003 Exam - Topic 3 Question 17 Discussion

Comprehensive and Detailed In-Depth

Vault automatically creates two built-in policies: root and default.

A: The root policy is created at initialization, granting superuser privileges (full access to all paths and operations). It's attached to root tokens and cannot be deleted or modified, per the policies documentation.

C: The default policy is also created automatically, providing basic permissions (e.g., token management). It's attached to all non-root tokens by default, can be modified, but cannot be deleted, as stated in the docs.

B: No admin policy is automatically created; administrative policies must be defined manually.

D: The default policy can be modified, contradicting this option.

Built-in Policies