Discuss HashiCorp Vault-Associate Exam Topic 7 Question 33

When unsealing Vault, each Shamir unseal key should be entered:

ASequentially from one system that all of the administrators are in front of

BBy different administrators each connecting from different computers

BWhile encrypted with each administrators PGP key

DAt the command line in one single command

Suggested Answer: A

The Vault's auth method component is the component that performs authentication and assigns identity and policies to a client. It verifies a client against an internal or external system, and generates a token with the appropriate policies attached. The token can then be used to access the secrets and resources that are authorized by the policies. Vault supports various auth methods, such as userpass, ldap, aws, kubernetes, etc., that can integrate with different identity providers and systems. The auth method component can also handle token renewal and revocation, as well as identity grouping and aliasing.Reference:Auth Methods | Vault | HashiCorp Developer,Authentication - Concepts | Vault | HashiCorp Developer

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Shenika 11 months ago

Really? I didn't know you could do it that way!

Delmy 11 months ago

I thought it had to be sequentially, like option A.

Rebeca 11 months ago

Wait, why would you use PGP keys? That seems unnecessary.

Wilson 12 months ago

Totally agree with B, that's the best practice!

Huey 12 months ago

I think it's B, different admins on different systems.

Colby 12 months ago

I don’t recall anything about using PGP keys for this process, so I’m not considering that option. It seems like it’s more about the unsealing method.

Tegan 1 year ago

I’m a bit confused about whether the keys should be entered sequentially or from different systems. I feel like both could be valid in different contexts.

Kaycee 1 year ago

I remember discussing the importance of having different admins input the keys to enhance security, so I’m leaning towards option B.

Daren 1 year ago

I think we practiced something similar where we had to enter keys from different locations, but I'm not sure if it was specifically about Shamir's scheme.

Nguyet 1 year ago

I've got it! The keys should be entered at the command line in a single command. That's the most efficient way to do it.

Gary 1 year ago

I'm not sure about this one. I'll need to review the material again before deciding how to handle the Shamir unseal keys.

Gilma 1 year ago

Wait, I'm a bit confused. Should the keys be entered by different admins from different computers instead?

Thora 1 year ago

Okay, I think I know the answer to this. I'll enter the keys sequentially from one system that all the admins are in front of.

Teresita 1 year ago

Hmm, this seems like a tricky one. I'll need to think carefully about the best approach here.

Anna 1 year ago

Wait, we're not supposed to read the question out loud while doing a funny voice, are we? Darn, my plan is foiled.

Chi 1 year ago

↳ replying to Anna

D) At the command line in one single command

Ezekiel 1 year ago

↳ replying to Anna

C) While encrypted with each administrators PGP key

Selma 1 year ago

↳ replying to Anna

B) By different administrators each connecting from different computers

Dannie 1 year ago

↳ replying to Anna

A) Sequentially from one system that all of the administrators are in front of

Lorean 1 year ago

Encrypting the keys with PGP? That's overkill, don't you think? We're not launching nuclear missiles here.

Val 1 year ago

↳ replying to Lorean

Encrypting with PGP adds an extra layer of security, it's worth it in the long run.

Gerri 1 year ago

↳ replying to Lorean

I agree, we need to take all necessary precautions to protect sensitive information.

Haley 1 year ago

↳ replying to Lorean

It's better to be safe than sorry when it comes to security.

Stephen 1 year ago

Entering the keys sequentially? Sounds like a recipe for disaster. What if one admin gets distracted and forgets their turn?

Franchesca 1 year ago

↳ replying to Stephen

Admin 3: We should consider using different administrators and computers for added security.

Mertie 1 year ago

↳ replying to Stephen

Admin 2: That sounds risky. What if someone forgets their turn?

Susy 1 year ago

↳ replying to Stephen

Admin 1: We should enter the keys sequentially to unseal the Vault.

Merissa 2 years ago

Option D seems the most straightforward, but I'm not sure it's the most secure. Better to follow the best practices, even if it's a bit more work.

Lindsay 1 year ago

↳ replying to Merissa

It's always better to follow best practices when it comes to securing sensitive information like Vault unseal keys.

Eleonore 1 year ago

↳ replying to Merissa

Using PGP keys for encryption adds an extra layer of security to the unsealing process.

Isaiah 1 year ago

↳ replying to Merissa

I agree, it's important to have multiple administrators involved to prevent any single point of failure.

Stefania 1 year ago

↳ replying to Merissa

Option A seems like the safest choice to ensure all administrators are present and aware of the unsealing process.

Erick 2 years ago

Hmm, I think option B is the way to go. It's important to have different admins involved to ensure proper separation of duties.

Lizette 1 year ago

↳ replying to Erick

Option B is definitely the best choice for unsealing the Vault.

Odelia 2 years ago

I think the keys should be encrypted with each administrators PGP key for added security.

Tijuana 2 years ago

I disagree, I believe they should be entered by different administrators from different computers.

Daisy 2 years ago

I think the Shamir unseal keys should be entered sequentially from one system.

HashiCorp Vault-Associate Exam - Topic 7 Question 33 Discussion