- (Topic 4)
What of the following features are true about batch tokens in Vault? (Select two)

1. A. Batch tokens are not persisted (written) to storage
2. B. Batch tokens can be renewed
3. C. Batch tokens are valid across all clusters when using Vault Enterprise replication
4. D. Batch tokens can create child tokens

Correct Answer: AC

- (Topic 3)
Which of the following storage backends support high availability? (Select four)

1. A. Consul
2. B. etcd
3. C. DynamoDB
4. D. Integrated Storage (raft)
5. E. Amazon S3
6. F. In-Memory

Correct Answer: ABCD

- (Topic 4)
Your organization audited an essential application and found it isn??t securely storing data. For added security, auditors recommended encrypting all data before storing it in a backend database, and the application server should not store encryption keys locally. Which secrets engine meets these requirements?

1. A. PKI secrets engine
2. B. SSH secrets engine
3. C. Transit secrets engine
4. D. Cubbyhole secrets engine

Correct Answer: C

- (Topic 5)
Which of the following statements describe the CLI command below? S vault login -method-1dap username-mitche11h

1. A. Generates a token which is response wrapped
2. B. You will be prompted to enter the password
3. C. By default the generated token is valid for 24 hours
4. D. Fails because the password is not provided

Correct Answer: A

- (Topic 5)
Which of the following describes usage of an identity group?

1. A. Limit the policies that would otherwise apply to an entity in the group
2. B. When they want to revoke the credentials for a whole set of entities simultaneously
3. C. Audit token usage
4. D. Consistently apply the same set of policies to a collection of entities

Correct Answer: D