- (Topic 1)
What API endpoint is used to manage secrets engines in Vault?

1. A. /secret-engines/
2. B. /sys/mounts
3. C. /sys/capabilities
4. D. /sys/kv

Correct Answer: B

- (Topic 5)
What environment variable overrides the CLI's default Vault server address?

1. A. VAULT_ADDR
2. B. VAULT_HTTP_ADORESS
3. C. VAULT_ADDRESS
4. D. VAULT _HTTPS_ ADDRESS

Correct Answer: B

- (Topic 3)
True or False? The following policy permits a user to read secrets contained in the path secrets/cloud/apps/jenkins?
text CollapseWrapCopy
path "secrets/cloud/apps/jenkins/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}

1. A. True
2. B. False

Correct Answer: B

- (Topic 4)
True or False? Performing a rekey operation using the vault operator rekey command creates new unseal/recovery keys as well as a new root key?

1. A. True
2. B. False

Correct Answer: B

- (Topic 4)
Vault enables the generation of dynamic credentials against many different platforms. When generating these credentials, what Vault feature is used to track the credentials?

1. A. namespace
2. B. role
3. C. token
4. D. lease_id

Correct Answer: D