Free Preparation Discussions
MENU
HashiCorp Exam HCVA0-003 Topic 4 Question 4 Discussion
Topic #: 4
Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?
The PKI secrets engine is designed to support the use case of reducing and ultimately removing the use of long lived X.509 certificates. The PKI secrets engine can generate dynamic X.509 certificates on demand, with short time-to-live (TTL) and automatic revocation. This eliminates the need for manual processes of generating, signing, and rotating certificates, and reduces the risk of certificate compromise or misuse. The PKI secrets engine can also act as a certificate authority (CA) or an intermediate CA, and can integrate with external CAs or CRLs. The PKI secrets engine can issue certificates for various purposes, such as TLS, SSH, code signing, email encryption, etc. Reference: https://developer.hashicorp.com/vault/docs/secrets/pki1, https://developer.hashicorp.com/vault/tutorials/getting-started/getting-started-dynamic-secrets
Gregoria
2 months agoDiego
2 months agoCrista
1 months agoYuette
1 months agoFletcher
1 months agoNelida
1 months agoBarney
1 months agoMiss
2 months agoDominga
1 months agoVerdell
2 months agoVincenza
2 months agoJerry
3 months agoElly
3 months agoDarci
3 months agoLyda
26 days agoTiara
27 days agoCheryl
2 months agoLashawnda
2 months agoJade
3 months agoLea
1 months agoWilda
1 months agoKatina
2 months agoJoni
2 months agoDusti
2 months agoCarlton
2 months agoAleisha
2 months agoDick
3 months agoJerry
4 months ago