Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

HashiCorp Vault-Associate Exam - Topic 3 Question 18 Discussion

Which of the following statements describe the secrets engine in Vault? Choose three correct answers.
A) Some secrets engines simply store and read data
B) Once enabled, you cannot disable the secrets engine
C) You can build your own custom secrets engine
D) Each secrets engine is isolated to its path
E) A secrets engine cannot be enabled at multiple paths

HashiCorp Vault-Associate Exam - Topic 3 Question 18 Discussion

Actual exam question for HashiCorp's Vault-Associate exam
Question #: 18
Topic #: 3
[All Vault-Associate Questions]

Which of the following statements describe the secrets engine in Vault? Choose three correct answers.

Show Suggested Answer Hide Answer
Suggested Answer: A

An authentication method should be selected for a use case based on the auth method that best establishes the identity of the client. The identity of the client is the basis for assigning a set of policies and permissions to the client in Vault. Different auth methods have different ways of verifying the identity of the client, such as using passwords, tokens, certificates, cloud credentials, etc. Depending on the use case, some auth methods may be more suitable or convenient than others. For example, for human users, the userpass or ldap auth methods may be easy to use, while for machines or applications, the approle or aws auth methods may be more secure and scalable. The choice of the auth method should also consider the trade-offs between security, performance, and usability.Reference:Auth Methods | Vault | HashiCorp Developer,Authentication - Concepts | Vault | HashiCorp Developer


by Hyman at May 28, 2024, 01:18 PM

Limited Time Offer

25%

Off

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Alex
9 months ago
Wait, a secrets engine can't be enabled at multiple paths? That sounds odd!
upvoted 0 times
...
Cassie
9 months ago
Each secrets engine is isolated to its path, for sure.
upvoted 0 times
...
Mari
10 months ago
Custom secrets engines are a thing!
upvoted 0 times
...
Richelle
10 months ago
I think you can actually disable the secrets engine if needed.
upvoted 0 times
...
Evan
10 months ago
A secrets engine can definitely store and read data.
upvoted 0 times
...
Valentin
10 months ago
I remember that each secrets engine is isolated to its path, so I think option D is also correct.
upvoted 0 times
...
Carin
11 months ago
I think option C sounds right because I recall something about building custom secrets engines in our practice questions.
upvoted 0 times
...
Devon
11 months ago
I'm not sure about option B; I feel like we discussed that you can actually disable a secrets engine if needed.
upvoted 0 times
...
Francoise
11 months ago
I remember that some secrets engines just store and read data, so I think option A is definitely one of the correct answers.
upvoted 0 times
...
Sabra
11 months ago
The secrets engine in Vault is pretty flexible. You can store and read data, build custom engines, and each engine is isolated to its own path. I'm not sure about the disabling part, though.
upvoted 0 times
...
Ira
11 months ago
Okay, let me think this through. The secrets engine can store and read data, and you can build your own custom engines. I believe each engine is isolated to its own path, but I'm not sure about disabling them once enabled.
upvoted 0 times
...
Adelle
11 months ago
Hmm, I'm a bit confused about the secrets engine. I know it has something to do with storing data, but I'm not sure about the details like disabling it or enabling it at multiple paths.
upvoted 0 times
...
Marvel
11 months ago
I'm pretty sure I know the answers to this one. The secrets engine in Vault can store and read data, you can build custom engines, and each engine is isolated to its own path.
upvoted 0 times
...
Teddy
11 months ago
Okay, let me see... I know planning, organizing, and controlling are definitely part of it. But what were the other two? I'll have to review my notes to jog my memory.
upvoted 0 times
...
Rasheeda
11 months ago
I feel like I should go with option D since it sounds most operationally efficient, but I wonder if using a Lambda function would provide better flexibility in some cases.
upvoted 0 times
...
Huey
11 months ago
I definitely recall that they're also used for establishing datum planes during layouts. I feel pretty confident about options I and III.
upvoted 0 times
...
Catherin
11 months ago
Okay, let's see. The user was synced in from LDAP, then deleted, then added back. I'm guessing the issue has something to do with the sync process and how the user is handled in the application.
upvoted 0 times
...
Arlyne
1 year ago
E has got to be wrong, that doesn't make any sense. I'm confident A, D, and C are the way to go. Vault's secrets engine is pretty flexible, gotta love it!
upvoted 0 times
Gracia
1 year ago
I think we're on the same page. Vault's secrets engine is really powerful.
upvoted 0 times
...
Justine
1 year ago
Yeah, E does sound off. Vault's secrets engine is definitely flexible.
upvoted 0 times
...
Kristel
1 year ago
I agree, A, D, and C are the correct statements about the secrets engine.
upvoted 0 times
...
...
Denae
1 year ago
Haha, I bet the person who wrote option B has never actually used Vault. Of course you can disable a secrets engine, what were they thinking? A, D, and C for me.
upvoted 0 times
Shelton
1 year ago
Yeah, option B doesn't make sense. A, D, and C are the correct answers.
upvoted 0 times
...
Edelmira
1 year ago
I think the person who wrote option B made a mistake. A, D, and C make more sense.
upvoted 0 times
...
Hester
1 year ago
I agree, option B is definitely not accurate. A, D, and C are the correct choices.
upvoted 0 times
...
...
Kizzy
1 year ago
Hmm, I'm not sure about B. Once enabled, you can't disable the secrets engine? That doesn't seem right. I'm going with A, D, and C.
upvoted 0 times
Lezlie
1 year ago
Yes, you can definitely disable a secrets engine. A, D, and C are the right choices.
upvoted 0 times
...
Alaine
1 year ago
I agree, B is wrong. A, D, and C are the correct statements about the secrets engine.
upvoted 0 times
...
Karrie
1 year ago
I think B is incorrect. You can disable the secrets engine after enabling it.
upvoted 0 times
...
...
Mari
1 year ago
A, D, and C seem to be the correct answers. The secrets engine in Vault allows you to store and read data, and each engine is isolated to its own path. Plus, you can build custom engines - that's a pretty cool feature!
upvoted 0 times
...
Mollie
1 year ago
I'm not sure about the second statement. I think once enabled, you can disable the secrets engine if needed.
upvoted 0 times
...
Cora
1 year ago
I agree with you, Clare. I also believe that you can build your own custom secrets engine in Vault.
upvoted 0 times
...
Clare
1 year ago
I think the secrets engine in Vault is really important for storing and reading data.
upvoted 0 times
...

Save Cancel