Monitoring Vault Environments

You want to prevent audit logs from being written to a specific device if the disk is full. What happens to Vault?

Where are audit logs physically stored if the 'file' audit device is configured?

To monitor the health of a Vault cluster, which endpoint should an external monitoring tool query?

Which THREE conditions might result in a Vault node becoming unhealthy?

What is the purpose of the 'prometheus_retention_time' setting in the Vault telemetry stanza?

Which command is used to rotate the audit log file on a Vault server to ensure logs are written to a new file?

You are analyzing Vault's performance and notice high latency in the 'core.fetch_token' metric. What does this suggest?

Which TWO of the following are valid telemetry sinks supported by Vault?

Which telemetry type is most effective for monitoring the 'lease' count in Vault?

When reviewing Vault server logs, you see 'request_path' entries that are redacted. Why is this occurring?

Which THREE pieces of information are captured in standard Vault audit logs for every request?

Which TWO factors contribute to the size and performance of Vault audit logs?

Which THREE actions should be taken when analyzing an audit log to identify potential security incidents?

Which TWO of these are valid audit device types in Vault?

How can you view the currently enabled audit devices in a Vault cluster?

You are troubleshooting high CPU usage in Vault. Which telemetry metric category should you examine first?

An auditor notices that audit logs are missing entries for a specific mount point. What is the most likely cause?

If you are running Vault in a high availability cluster, where should you look for information regarding leader election?

You notice an 'audit_failure' error in the Vault logs. What is the immediate consequence for client requests?

Which TWO configurations are required to effectively monitor Vault in a production environment?

Which THREE types of metrics are collected by Vault's telemetry system?

What does the 'vault_core_seal_setup_duration' metric represent?

Which log level should be used when you need to capture detailed debugging information for Vault startup issues?

Which tool is commonly used to view Vault metrics in a graphical format?