Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HashiCorp HCVA0-003 Exam - Topic 7 Question 23 Discussion

You are using Vault CLI and enable the database secrets engine on the default path of database/. However, the DevOps team wants to enable another database secrets engine for testing but receives an error stating the path is already in use. How can you enable a second database secrets engine using the CLI?
C) vault secrets enable -path=database2 database
A) vault secrets enable database database2/
B) vault secrets enable -force database
D) vault secrets enable database2/

HashiCorp HCVA0-003 Exam - Topic 7 Question 23 Discussion

Actual exam question for HashiCorp's HCVA0-003 exam
Question #: 23
Topic #: 7
[All HCVA0-003 Questions]

You are using Vault CLI and enable the database secrets engine on the default path of database/. However, the DevOps team wants to enable another database secrets engine for testing but receives an error stating the path is already in use. How can you enable a second database secrets engine using the CLI?

Show Suggested Answer Hide Answer
Suggested Answer: C

Comprehensive and Detailed In-Depth

Vault mounts secrets engines at unique paths, and only one engine can occupy a given path (e.g., database/). To enable a second database secrets engine, you must specify a different path using the -path flag: vault secrets enable -path=database2 database mounts a new instance at database2/. The type (database) defines the engine, and -path customizes its location, avoiding conflicts.

A: Incorrect syntax; lacks -path and misplaces database2/.

B: -force doesn't create a new path; it overwrites an existing engine, which isn't the goal.

D: Omits -path and engine type, making it invalid.

The secrets engine tutorial confirms -path is required for multiple instances of the same engine type.


Secrets Engines Tutorial

Secrets Enable Command

Contribute your Thoughts:

0/2000 characters
Jordan
4 days ago
This question is tricky. I feel like I need to think it through.
upvoted 0 times
...
Wilburn
9 days ago
I agree, C is the way to go!
upvoted 0 times
...
Zona
14 days ago
Wait, can you really use different paths like that?
upvoted 0 times
...
Gearldine
19 days ago
Definitely option C, that’s how it works!
upvoted 0 times
...
Kristel
24 days ago
I thought you could only have one at a path?
upvoted 0 times
...
Markus
29 days ago
You can enable a second engine with option C!
upvoted 0 times
...
Valentin
1 month ago
I recall that you can enable a secrets engine at a custom path, so option C sounds right to me, but I’m not 100% confident.
upvoted 0 times
...
Nobuko
1 month ago
I’m a bit confused about the paths. Is it possible to just add a suffix like in option D? That seems too simple though.
upvoted 0 times
...
Teri
1 month ago
I'm not entirely sure, but I feel like I saw something about using the -force flag in a practice question. Could that be option B?
upvoted 0 times
...
Nida
2 months ago
I think I remember that you need to specify a different path for the second database secrets engine, so maybe option C?
upvoted 0 times
...

Save Cancel