1) What is HashiCorp Vault?
a) A configuration management tool
b) A secrets management tool
c) A container orchestration tool
Answer: b
2) What is the primary use case for HashiCorp Vault?
a) Managing application servers
b) Storing secrets
c) Automating infrastructure
Answer: b
3) How does Vault store secrets?
a) In plaintext
b) Encrypted with a symmetric key
c) Encrypted with an asymmetric key
Answer: c
4) What is Vault’s approach to authentication?
a) Username and password
b) Token-based authentication
c) Two-factor authentication
Answer: b
5) What is dynamic secrets management?
a) Automatically rotating secrets on a scheduled basis
b) Generating and revoking secrets on-demand
c) Automatically backing up secrets to a remote location
Answer: b
6) What is the purpose of a Vault policy?
a) To authenticate users
b) To grant users access to certain secrets
c) To manage Vault clusters
Answer: b
7) How does Vault handle encryption of data in transit?
a) Via SSL/TLS encryption
b) Via AES encryption
c) Via RSA encryption
Answer: a
8) What is a backend in Vault?
a) A type of secret
b) A storage location for secrets
c) A type of policy
Answer: b
9) What is the difference between a token and a lease?
a) Tokens are used for authentication, leases are used for secrets management
b) Tokens are short-lived, leases are long-lived
c) Tokens are long-lived, leases are short-lived
Answer: c
10) What is a secret engine in Vault?
a) A component that generates secrets
b) A component that stores secrets
c) A component that manages secrets
Answer: c
11) What is the difference between KV secrets engine v1 and v2?
a) V2 supports versioning and reversioning of secrets
b) V1 supports versioning and reversioning of secrets
c) There is no difference in functionality between the two versions
Answer: a
12) How does Vault handle token revocation?
a) Tokens are automatically revoked when they expire
b) Tokens are manually revoked by an administrator
c) Tokens are automatically revoked when the user logs out
Answer: b
13) What is a mount in Vault?
a) A type of secret
b) A storage location for secrets
c) A logical name for a backend
Answer: c
14) What is seal wrapping in Vault?
a) A way to encrypt secrets at-rest
b) A way to encrypt secrets in-transit
c) A way to encrypt Vault’s master key for secure distribution
Answer: c
15) What is a transit secrets engine in Vault?
a) A component that generates secrets for transit
b) A component that stores secrets for transit
c) A component that manages secrets for transit
Answer: c
16) What is a Cubbyhole secrets engine in Vault?
a) A location to store secrets temporarily
b) A location to store secrets permanently
c) A location to store pre-generated secrets
Answer: a
17) How does Vault handle high availability?
a) Via clustering of multiple Vault instances
b) Via backup and restore of secrets
c) Via replication of secrets to multiple backends
Answer: a
18) What is a token accessor in Vault?
a) A way to grant temporary access to a token
b) A way to map policies to tokens
c) A way to revoke tokens automatically
Answer: a
19) What is the purpose of Vault’s audit log?
a) To monitor user login activity
b) To track changes to policies and secrets
c) To record interactions with Vault’s API
Answer: c
20) What is an auth method in Vault?
a) A way to authenticate users
b) A way to store secrets
c) A way to manage policies
Answer: a
21) Can you use Vault without any authentication method?
a) Yes
b) No
Answer: b
22) What is a token TTL in Vault?
a) Time-to-live for a token
b) Time-to-live for a secret
c) Time-to-live for a policy
Answer: a
23) What is the difference between a static and a dynamic secret in Vault?
a) Static secrets are manually managed, while dynamic secrets are automatically generated and managed
b) Static secrets are automatically managed, while dynamic secrets are manually generated and managed
c) There is no difference in functionality between the two types
Answer: a
24) What is the purpose of the root token in Vault?
a) To authenticate the first user
b) To manage policies
c) To manage the Vault cluster
Answer: a
25) What is a SecretID in Vault?
a) A way to authenticate users
b) A way to grant temporary access to a token
c) A way to revoke tokens automatically
Answer: b
26) Can Vault be run in a dev mode?
a) Yes
b) No
Answer: a
27) What is Vault written in?
a) Haskell
b) Go
c) Rust
Answer: b
28) What is the difference between a userpass and a LDAP auth method in Vault?
a) Userpass requires only a username and password, while LDAP requires a full LDAP configuration
b) LDAP requires only a username and password, while userpass requires a full LDAP configuration
c) There is no difference in functionality between the two types
Answer: a
29) What is a root token unseal key?
a) A key that is used to decrypt the Vault cluster’s master key
b) A key that is used to authenticate a user with the root token
c) A key that is used to revoke a root token
Answer: a
30) Can Vault be integrated with HSMs?
a) Yes
b) No
Answer: a
31) What is a cluster leader in Vault?
a) The primary Vault instance in a clustered environment
b) The backup Vault instances in a clustered environment
c) The master Vault administrator who can manage all secrets
Answer: a
32) What is a lease ID in Vault?
a) A unique identifier for a secret
b) A unique identifier for a token
c) A unique identifier for a policy
Answer: a
33) Can Vault be used for database secrets management?
a) Yes
b) No
Answer: a
34) What is a token orphan in Vault?
a) A token that has no associated policies
b) A token that has expired
c) A token that has been revoked
Answer: a
35) Can Vault be used for SSH secrets management?
a) Yes
b) No
Answer: a
36) What is the recommended way to deploy Vault in production?
a) Standalone mode
b) Development mode
c) Clustered mode
Answer: c
37) How does Vault handle key management?
a) Via a key management service
b) Via a built-in key management system
c) Via a third-party key management system
Answer: a
38) Can Vault be used for PKI secrets management?
a) Yes
b) No
Answer: a
39) What is the difference between a policy and an ACL in Vault?
a) A policy controls access to secrets, while an ACL controls access to the Vault API
b) An ACL controls access to secrets, while a policy controls access to the Vault API
c) There is no difference between the two terms
Answer: a
40) Can Vault be used for cloud secrets management?
a) Yes
b) No
Answer: a
41) What is the purpose of the KV secrets engine in Vault?
a) To store and manage key-value pairs
b) To manage access to other secrets engines
c) To store and manage certificate authority (CA) secrets
Answer: a
42) Can Vault be integrated with Kubernetes?
a) Yes
b) No
Answer: a
43) What is the difference between a token role and a token policy in Vault?
a) A token role grants access to secrets while a token policy grants API access
b) A token policy grants access to secrets while a token role assigns metadata to a token
c) There is no difference between the two terms
Answer: a
44) Can Vault be used for PKCS#11 secrets management?
a) Yes
b) No
Answer: a
45) What is a rekey in Vault?
a) A way to restore a lost key
b) A way to rotate a key
c) A way to generate a new key
Answer: b
46) Can Vault be used for certificate revocation management?
a) Yes
b) No
Answer: a
47) What is a Shamir’s secret sharing in Vault?
a) A way to encrypt secrets at-rest
b) A way to encrypt secrets in-transit
c) A way to distribute Vault’s master key for secure backups
Answer: c
48) Can Vault be used for AWS secrets management?
a) Yes
b) No
Answer: a
49) What is a seal in Vault?
a) A component that encrypts the Vault cluster’s master key
b) A component that manages secrets for a specific backend
c) A component that manages Vault policies
Answer: a
50) Can Vault be used for Azure secrets management?
a) Yes
b) No
Answer: a
- Top 10 DevOps Trainers in the world - October 7, 2023
- What is Cookies and Why it is Used? - May 24, 2023
- TOP trends of transitions in TikTok - May 10, 2023