- (Topic 2)
The Vault Agent provides which of the following benefits? (Select three)

1. A. Token renewal
2. B. Authentication to Vault
3. C. Client-side caching of responses
4. D. Automatically creates secrets in the desired storage backend

Correct Answer: ABC

- (Topic 3)
You need to create a limited-privileged token that isn??t impacted by the TTL of its parent. What type of token should you create?

1. A. Service token with a use limit
2. B. Orphan token
3. C. Periodic token
4. D. Root token

Correct Answer: B

- (Topic 3)
Which of the following features in Vault will replicate service tokens between clusters?

1. A. Disaster Recovery Replication
2. B. Performance Replication
3. C. Vault Agent
4. D. Integrated Storage

Correct Answer: A

- (Topic 4)
A developer has requested access to manage secrets at the path kv/apps/webapp01. You create the policy below which gives them the proper access:
path "kv/apps/webapp01" {
capabilities = ["read", "create", "update", "list"]
}
However, when the developer logs in to the Vault UI, they see the following screenshot and cannot access the desired secret. Why can??t the developer see the secrets they need?

1. A. The Vault UI isn??t enabled for the developer, therefore they will only see the default options
2. B. The key/value secrets engine isn??t available in the Vault UI, therefore the developer should use a different Vault interface instead
3. C. The policy doesn??t permit list access to the paths prior to the secret so the Vault UI doesn??t display the mount path
4. D. The secrets are stored under the cubbyhole secrets engine, so the developer should browse to that secrets engine

Correct Answer: C

- (Topic 4)
Your organization has applications in a primary data center and a secondary warm-standby site. You want to configure Vault replication between the primary and secondary clusters. If the primary fails over to the secondary, the applications must interact with Vault without re- authenticating. What type of Vault replication would you use?

1. A. Performance Replication
2. B. Integrated Storage
3. C. Disaster Recovery Replication
4. D. Vault Secrets Operator

Correct Answer: C