- (Topic 4)
Sara uses the Vault CLI for administrative tasks on the production cluster. However, she encounters permission-denied errors when making changes and needs to check which policies are attached to her token to view and adjust permissions. What command can she run on the Vault node to see the attached policies?

1. A. vault operator diagnose
2. B. vault policy list
3. C. vault token capabilities
4. D. vault token lookup

Correct Answer: D

- (Topic 3)
What command would you use to enable the Kubernetes secrets engine at the path of /k8s-cluster?

1. A. vault secrets enable -path=k8s-cluster kubernetes
2. B. vault kv put k8s-cluster type=kubernetes
3. C. vault write sys/mounts/k8s-cluster
4. D. vault secrets enable kubernetes -path=k8s-cluster

Correct Answer: A

- (Topic 4)
You are using Vault to generate dynamic credentials for a Microsoft SQL server to perform queries for a month-end report. The report seems to be taking much longer than expected due to degradation on the underlying server, and you are afraid that Vault might automatically revoke the credentials. How can you extend the time the credentials are valid to ensure your month-end query is successful?

1. A. Renew the lease
2. B. Generate a new lease
3. C. Create a new role within the secrets engine for the database
4. D. Revoke the lease

Correct Answer: A

- (Topic 3)
When a lease is created, what actions can be performed by using only the lease ID? (Choose two)

1. A. Renew the lease
2. B. Revoke the lease
3. C. Extend the max TTL for the lease
4. D. Authenticate using the lease ID

Correct Answer: AB

- (Topic 4)
Which of the following capabilities can be used when writing a Vault policy? (Select four)

1. A. list
2. B. deny
3. C. apply
4. D. root
5. E. create
6. F. write

Correct Answer: ABEF