Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HashiCorp HCVA0-003 Exam - Topic 3 Question 26 Discussion

Which of the following is true about the token authentication method in Vault? (Select three)
A) The token auth method is automatically enabled in Vault and cannot be disabled and B) External authentication mechanisms, such as GitHub, are used to dynamically create tokens and C) The token auth method is used as the first method of authentication for Vault for a newly initialized Vault node/cluster
D) Tokens cannot be used directly; they must be used in conjunction with one of Vault's many auth methods

HashiCorp HCVA0-003 Exam - Topic 3 Question 26 Discussion

Actual exam question for HashiCorp's HCVA0-003 exam
Question #: 26
Topic #: 3
[All HCVA0-003 Questions]

Which of the following is true about the token authentication method in Vault? (Select three)

Show Suggested Answer Hide Answer
Suggested Answer: A, B, C

Comprehensive and Detailed In-Depth

The token auth method is foundational to Vault. The Vault documentation states:

'Tokens are the core method for authentication within Vault. It is also the only auth method that cannot be disabled. If you've gone through the getting started guide, you probably noticed that vault server -dev (or vault operator init for a non-dev server) outputs an initial 'root token.' This is the first method of authentication for Vault. All external authentication mechanisms, such as GitHub, map down to dynamically created tokens.'

--- Vault Concepts: Tokens

A, B, C: Correct per the above.

D: Incorrect; tokens can be used directly:

'Tokens can be used directly or auth methods can be used to dynamically generate tokens based on external identities.'

--- Vault Concepts: Tokens


Vault Concepts: Tokens

Contribute your Thoughts:

0/2000 characters
I remember studying that the token auth method is indeed one of the first methods used, but I'm not sure if it's the only one for a new Vault instance.
upvoted 0 times
...

Save Cancel