Discuss HashiCorp Vault-Associate Exam Topic 9 Question 30

Which of the following describes usage of an identity group?

ALimit the policies that would otherwise apply to an entity in the group

BWhen they want to revoke the credentials for a whole set of entities simultaneously

CAudit token usage

DConsistently apply the same set of policies to a collection of entities

Suggested Answer: D

An identity group is a collection of entities that share some common attributes. An identity group can have one or more policies attached to it, which are inherited by all the members of the group. An identity group can also have subgroups, which can further refine the policies and attributes for a subset of entities.

One of the use cases of an identity group is to consistently apply the same set of policies to a collection of entities. For example, an organization may have different teams or departments, such as engineering, sales, or marketing. Each team may have its own identity group, with policies that grant access to the secrets and resources that are relevant to their work. By creating an identity group for each team, the organization can ensure that the entities belonging to each team have the same level of access and permissions, regardless of which authentication method they use to log in to Vault.Reference:Identity: entities and groups | Vault | HashiCorp Developer,vault_identity_group | Resources | hashicorp/vault | Terraform | Terraform Registry

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Elenore 11 months ago

I agree with D, it's all about applying policies uniformly.

Ashlee 11 months ago

Wait, can you really audit token usage with C? Sounds tricky!

Laquanda 11 months ago

A seems a bit off, limiting policies isn't really the point.

Kenda 12 months ago

I think B is a good choice too, revoking is important!

Rolande 12 months ago

Definitely D, makes the most sense for consistency.

Sylvie 12 months ago

I definitely remember that identity groups help with policy management, so option D seems the most relevant to me.

Michell 1 year ago

I practiced a similar question, and I feel like limiting policies could be a part of identity groups, but I can't recall if that's the main function.

Lonny 1 year ago

I'm not entirely sure, but I remember something about revoking credentials for multiple entities at once, which sounds like option B.

Alecia 1 year ago

I think identity groups are mainly about applying consistent policies, so I might lean towards option D.

Lenna 1 year ago

Okay, let me see here. I know identity groups have something to do with managing access and policies, but I'm a little fuzzy on the details. I'll have to make an educated guess on this one.

Nell 1 year ago

Ah, identity groups - I remember learning about those. I'm pretty confident the answer is A, using an identity group to limit the policies that would otherwise apply to an entity in the group.

Francisca 1 year ago

This one seems pretty straightforward. I think the answer is D - using an identity group to consistently apply the same set of policies to a collection of entities.

Tora 1 year ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully. Maybe I should review the course material on identity groups again before deciding.

Lizbeth 1 year ago

I'm not entirely sure about this one. The options seem to be talking about different OOP concepts, and I'm not sure if I fully grasp the distinction between them. I'll try to eliminate the options that are clearly wrong and then make an educated guess.

Curtis 2 years ago

I'm going with D. Consistently applying policies to a group is the bread and butter of identity management.

Benedict 2 years ago

↳ replying to Curtis

User 3: D is definitely the best choice. Consistency is key in identity management.

Rosenda 2 years ago

↳ replying to Curtis

User 2: Yeah, D makes the most sense. It's important to have the same policies for a group.

Carlene 2 years ago

↳ replying to Curtis

User 1: I agree, D is the way to go. It's all about consistency.

Elfrieda 2 years ago

Haha, I'm just hoping the exam doesn't have any trick questions like 'all of the above' as the right answer. That would really throw me for a loop!

Solange 2 years ago

Option B seems like the most practical use case for identity groups - being able to revoke credentials for an entire set of entities at once is really useful.

Curt 2 years ago

↳ replying to Solange

Audit token usage is crucial too, it helps track and monitor the activity of identity groups.

Rosann 2 years ago

↳ replying to Solange

I think option D is also important, consistently applying the same policies to a collection of entities can help with organization and security.

Virgie 2 years ago

↳ replying to Solange

I agree, being able to revoke credentials for a whole set of entities at once is a powerful feature.

Keneth 2 years ago

I think option D is the correct answer. Applying the same set of policies to a group makes sense for managing access and permissions efficiently.

Florinda 2 years ago

↳ replying to Keneth

I see your point, but I still believe option D is the best approach for consistent policy application.

Valda 2 years ago

↳ replying to Keneth

Option C is important too, auditing token usage helps ensure security.

Buffy 2 years ago

↳ replying to Keneth

I think option A could also be a valid choice, limiting policies for a specific group.

Rikki 2 years ago

↳ replying to Keneth

I agree, option D is the most efficient way to manage access for a group.

Lindsey 2 years ago

I'm not sure, but I think A) Limit the policies that would otherwise apply to an entity in the group could also be a valid option.

Kimberely 2 years ago

I agree with Xenia, D) makes the most sense for describing usage of an identity group.

Xenia 2 years ago

I think the answer is D) Consistently apply the same set of policies to a collection of entities.

HashiCorp Vault-Associate Exam - Topic 9 Question 30 Discussion