- (Topic 3)
Your organization operates active/active applications across multiple data centers for high availability. Which Vault feature should be used in the secondary data centers to provide local access to secrets?

1. A. Performance standby nodes
2. B. Customized plugins for the Vault cluster
3. C. Disaster recovery cluster
4. D. Performance replication cluster

Correct Answer: D

- (Topic 1)
When using the Vault Secrets Operator, where is the secret written to after being retrieved from Vault?

1. A. The secret is never written to any service or persistent storage
2. B. Directly to the filesystem of the pod
3. C. Kubernetes Secrets
4. D. To the cloud-provider??s native secret manager (Azure Key Vault, AWS Secrets Manager, etc.)

Correct Answer: C

- (Topic 4)
Vault is configured with the oidc auth method and you need to log in using the CLI. What command would you use to authenticate so you can make configuration changes to Vault?

1. A. vault login -method=oidc username=bryan
2. B. vault auth oidc
3. C. vault login auth/oidc/users/bryan
4. D. vault login username=bryan

Correct Answer: A

- (Topic 5)
Where can you set the Vault seal configuration? Choose two correct answers.

1. A. Cloud Provider KMS
2. B. Vault CLI
3. C. Vault configuration file
4. D. Environment variables
5. E. Vault API

Correct Answer: CD

- (Topic 2)
Which of the following is not an action associated with the Transit secrets engine when interacting with data?

1. A. encrypt
2. B. decrypt
3. C. rewrap
4. D. update

Correct Answer: D