Free Preparation Discussions
MENU
HashiCorp Exam HCVA0-003 Topic 7 Question 2 Discussion
Topic #: 7
As a best practice, the root token should be stored in which of the following ways?
The root token is the initial token created when initializing Vault. It has unlimited privileges and can perform any operation in Vault. As a best practice, the root token should be revoked and never stored after initial setup. This is because the root token is a single point of failure and a potential security risk if it is compromised or leaked. Instead of using the root token, Vault operators should create other tokens with appropriate policies and roles that allow them to perform their tasks. If a new root token is needed in an emergency, the vault operator generate-root command can be used to create one on-the-fly with the consent of a quorum of unseal key holders. Reference: Tokens | Vault | HashiCorp Developer, Generate root tokens using unseal keys | Vault | HashiCorp Developer
Annamaria
2 months agoDorethea
2 months agoFreeman
29 days agoTerina
1 months agoLashawnda
1 months agoDaren
1 months agoTamesha
2 months agoYvette
20 days agoMichel
1 months agoJamie
1 months agoBillye
3 months agoOrville
2 months agoMelvin
2 months agoArmanda
2 months agoDwight
3 months agoCarrol
3 months agoSang
3 months agoAnthony
3 months agoBlair
2 months agoLawana
2 months agoLashawnda
2 months agoJoesph
2 months agoNadine
2 months agoLuz
2 months agoDorinda
3 months agoBrittni
3 months ago