New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

HashiCorp Vault-Associate Exam - Topic 2 Question 7 Discussion

Actual exam question for HashiCorp's Vault-Associate exam
Question #: 7
Topic #: 2
[All Vault-Associate Questions]

Which Vault secret engine may be used to build your own internal certificate authority?

Show Suggested Answer Hide Answer
Suggested Answer: B

The Vault secret engine that can be used to build your own internal certificate authority is the PKI secret engine. The PKI secret engine generates dynamic X.509 certificates on-demand, without requiring manual processes of generating private keys and CSRs, submitting to a CA, and waiting for verification and signing. The PKI secret engine can act as a root CA or an intermediate CA, and can issue certificates for various purposes, such as TLS, code signing, email encryption, etc. The PKI secret engine can also manage the certificate lifecycle, such as rotation, revocation, renewal, and CRL generation. The PKI secret engine can also integrate with external CAs, such as Venafi or Entrust, to delegate the certificate issuance and management.Reference:PKI - Secrets Engines | Vault | HashiCorp Developer,Build Your Own Certificate Authority (CA) | Vault - HashiCorp Learn


by Glenna at Dec 09, 2023, 12:20 AM

Limited Time Offer

25%

Off

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Keena
3 months ago
PostgreSQL? No way, that's not right.
upvoted 0 times
...
Chanel
3 months ago
Wait, can you really use PKI for that? Sounds too easy!
upvoted 0 times
...
Harrison
4 months ago
PKI is the way to go for internal CAs.
upvoted 0 times
...
Tamesha
4 months ago
I thought it was Transit at first.
upvoted 0 times
...
Louis
4 months ago
Definitely PKI for that!
upvoted 0 times
...
Casie
4 months ago
I might be mixing things up, but I feel like PostgreSQL is more about database management than certificates.
upvoted 0 times
...
Rodolfo
4 months ago
Transit seems more related to encryption, so I don't think it's the right choice for a certificate authority.
upvoted 0 times
...
Launa
4 months ago
I remember practicing a question about Vault's secret engines, and PKI was definitely mentioned in that context.
upvoted 0 times
...
Jestine
5 months ago
I think the PKI secret engine is the one for building an internal certificate authority, but I'm not completely sure.
upvoted 0 times
...
Denny
5 months ago
I'm a little confused on this one. I know Vault has a lot of security features, but I can't recall the specific engine for building a CA. I'll have to review my notes and try to eliminate the wrong answers.
upvoted 0 times
...
Alease
5 months ago
Hmm, I'm a bit unsure on this one. I know Vault has a lot of different secret engines, but I can't remember which one is specifically for CAs. I'll have to think this through carefully.
upvoted 0 times
...
Glory
5 months ago
I'm pretty sure the answer is PKI, since that's the Vault secret engine used for building a custom certificate authority.
upvoted 0 times
...
Daryl
5 months ago
The PKI engine sounds right to me. That's the one that allows you to manage your own internal PKI infrastructure, including issuing certificates. I'm confident that's the answer.
upvoted 0 times
...
Terry
5 months ago
Hmm, I'm a bit confused. I'll need to review my notes on AWS Guard Duty to make sure I understand how it works.
upvoted 0 times
...
Irma
5 months ago
Okay, the Cable Communications Policy Act - I remember learning about that. Let me think through the options carefully and see if I can figure out the right requirement it specifies.
upvoted 0 times
...
Brandon
2 years ago
Hah, I bet the person who wrote this question is just trying to trip us up. They're probably hoping we'll get distracted by all the other shiny secret engine options.
upvoted 0 times
...
Tawny
2 years ago
Ha, true that. Gotta stay focused and not get too fancy. I'm going with B) PKI for this one.
upvoted 0 times
Bettina
2 years ago
Let's go with PKI then. It's a reliable option for sure.
upvoted 0 times
...
Elbert
2 years ago
I would also choose PKI for building an internal certificate authority.
upvoted 0 times
...
Dalene
2 years ago
Yeah, PKI is the most common choice for that purpose. Good call!
upvoted 0 times
...
Jacklyn
2 years ago
PKI is definitely the way to go for building an internal certificate authority.
upvoted 0 times
...
Sarina
2 years ago
I think PKI is the best option too. It's straightforward and secure.
upvoted 0 times
...
Lindsay
2 years ago
I agree, keeping it simple is key. PKI is a solid choice.
upvoted 0 times
...
...
Dick
2 years ago
Yeah, I agree. The PKI engine is the one that allows you to build your own internal certificate authority, right? I remember covering that in the training materials.
upvoted 0 times
...
Vallie
2 years ago
You know, you might be onto something there. Transit does have some certificate management capabilities. But I'm pretty confident the PKI engine is the one specifically designed for that purpose.
upvoted 0 times
...

Save Cancel