Discuss HashiCorp Vault-Associate Exam Topic 4 Question 17

You have been tasked with writing a policy that will allow read permissions for all secrets at path secret/bar. The users that are assigned this policy should also be able to list the secrets. What should this policy look like?

AOption A

BOption B

COption C

DOption D

Suggested Answer: A

The command vault secrets enable transit enables the transit secrets engine at the transit path. The transit secrets engine is a secrets engine that handles cryptographic functions on data in-transit, such as encryption, decryption, signing, verification, hashing, and random bytes generation. The transit secrets engine does not store the data sent to it, but only performs the requested operations and returns the results. The transit secrets engine can also be viewed as ''cryptography as a service'' or ''encryption as a service''. The command vault secrets enable transit uses the default path of transit for the secrets engine, but this can be changed by using the -path option. For example, vault secrets enable -path=my-transit transit would enable the transit secrets engine at the my-transit path.Reference:Transit - Secrets Engines | Vault | HashiCorp Developer,vault secrets enable - Command | Vault | HashiCorp Developer

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

33 comments · newest first

Benton 11 months ago

Option D is definitely not what we need for this policy.

Luisa 11 months ago

Wait, can we really give read access to all secrets?

Marci 11 months ago

Not sure about Option C, seems too restrictive.

Nell 12 months ago

I think Option A is the best choice here!

Lauryn 12 months ago

Option B looks solid for read and list permissions.

Maryanne 12 months ago

I remember discussing the importance of specifying the correct path, but I’m torn between Options A and B.

Delisa 1 year ago

I feel like Option C might be the right choice, but I’m a bit confused about the path structure in the policy.

Karma 1 year ago

I think the policy needs to include both "read" and "list" permissions, but I can't recall the exact syntax for that.

Jesse 1 year ago

I remember we practiced a similar question about permissions, but I’m not sure if it was specifically about listing secrets.

Yuriko 1 year ago

This is a good test of my Vault policy knowledge. I'll methodically evaluate each option against the requirements and select the one that provides the necessary permissions.

Lauryn 1 year ago

I'm feeling a bit lost on this one. The policy requirements are clear, but I'm not sure which option best meets them. I'll need to re-read the question and think it through step-by-step.

Blondell 1 year ago

Okay, I've got this. The policy needs to grant read permissions for all secrets at the "secret/bar" path, as well as the ability to list the secrets. Option C looks like the right choice here.

Doug 1 year ago

Hmm, I'm a bit unsure about this one. The policy options seem similar, so I'll need to analyze them closely to determine the correct one.

Carma 1 year ago

This looks like a straightforward Vault policy question. I'll carefully review the policy options and think through the required permissions.

Lacresha 1 year ago

Okay, I've got a strategy here. I'll start by looking at the DSCI certification guidelines to see if there are any explicit rules about who can conduct external assessments. That should help me determine the right answer.

Quentin 1 year ago

This seems like a pretty straightforward question. I'm pretty confident I can figure this out.

Arthur 1 year ago

I think the key here is that black-box testing is done without access to the internal structure or code of the system. Checking memory leaks by running the program fits that description.

King 1 year ago

I think the 7500E series is the most likely answer here, since it's mentioned as sharing fans with the 7300 chassis switches.

Margot 1 year ago

I don't know about you, but I'm feeling pretty 'vault-y' about this question. Get it? Vault-y? Ah, forget it, I'll just pick Option C and move on.

Miss 1 year ago

Option C all the way! It's like the Goldilocks of Vault policies - not too much, not too little, just right.

Mauricio 1 year ago

↳ replying to Miss

I have to go with Option C as well, it seems like the most balanced choice for this policy.

Gracia 1 year ago

↳ replying to Miss

I see your point, but I still think Option B would be more effective in this scenario.

Rodney 1 year ago

↳ replying to Miss

I disagree, I believe Option C is the most suitable for allowing read permissions for all secrets at path secret/bar.

Bobbye 1 year ago

↳ replying to Miss

I think Option A is the best choice for this policy.

Roselle 1 year ago

Hold up, is this a trick question? I'm gonna go with Option D just to be safe. Can't be too careful with these Vault certification exams, you know?

Hildegarde 1 year ago

↳ replying to Roselle

Yeah, I'm going with Option D as well. Can't take any chances with these exams.

Chi 1 year ago

↳ replying to Roselle

I agree, better safe than sorry. Option D it is.

Kathryn 1 year ago

↳ replying to Roselle

I think Option D is the safest choice too. Can't be too careful with permissions.

Arletta 1 year ago

I'm torn between Option B and Option C. Both seem to achieve the same goal, but Option C might be a bit more concise. Hmm, decisions, decisions.

Delisa 1 year ago

Option C looks good, it's the most straightforward way to grant read permissions and list secrets at the secret/bar path.

Arthur 2 years ago

Yes, Option A seems to be the correct choice. It specifies the required permissions clearly.

Luis 2 years ago

I agree with Arthur. Option A looks like it fits the requirements based on the image provided.

Arthur 2 years ago

I think the policy should allow read permissions for all secrets at path secret/bar and also allow listing the secrets.

HashiCorp Vault-Associate Exam - Topic 4 Question 17 Discussion