- (Topic 5)
The following three policies exist in Vault. What do these policies allow an organization to do?

1. A. Separates permissions allowed on actions associated with the transit secret engine
2. B. Nothing, as the minimum permissions to perform useful tasks are not present
3. C. Encrypt, decrypt, and rewrap data using the transit engine all in one policy
4. D. Create a transit encryption key for encrypting, decrypting, and rewrapping encrypted data

Correct Answer: C

- (Topic 4)
You have multiple Vault clusters in your environment, one for test and one for production. You have the CLI installed on your local machine and need to target the production cluster to make configuration changes. What environment variable can you set to target the production cluster?

1. A. VAULT_REDIRECT_ADDR
2. B. VAULT_CLUSTER_ADDR
3. C. VAULT_ADDR
4. D. VAULT_CAPATH

Correct Answer: C

- (Topic 4)
Your supervisor has requested that you log into Vault and update a policy for one of the development teams. You successfully authenticated to Vault via OIDC but do not see a way to manage the Vault policies. Why are you unable to manage policies in the Vault UI?

1. A. Policies are only available on Vault Enterprise
2. B. The Vault node is sealed, and therefore you cannot manage policies
3. C. Policies cannot be managed in the UI, only the CLI and API
4. D. The policy associated with your login does not permit access to manage policies

Correct Answer: D

- (Topic 2)
After a client has authenticated to Vault, what security feature is used to make all subsequent calls?

1. A. ldap
2. B. pgp
3. C. path
4. D. key shard
5. E. listener
6. F. token

Correct Answer: F

- (Topic 5)
Running the second command in the GUI CLI will succeed.

1. A. True
2. B. False

Correct Answer: B