196 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
What is the result of assigning a policy with 'deny' capability to a path that is also covered by an 'allowed' capability in a different policy?
Vault evaluates all policies attached to a token and applies a strict precedence order where 'deny' always wins over any other capability, regardless of which policy or path it appears in. Even if another policy grants 'read', 'create', or 'sudo' on the same path, the presence of…Read full explanation
An organization wants to enforce that a specific group of users can only request secrets if a manager approves the request via a Control Group. Which object must be created to define the approval workflow?
To enforce that a specific group of users can only request secrets if a manager approves via a Control Group, you must create a Control Group Policy. This policy defines the approval workflow, including the required number of approvals and the authorized approvers. Control Groups…Read full explanation
You are writing a Sentinel policy to restrict secret access. Which parameter provides the current request's metadata, such as the path or operation type?
In Vault Sentinel policies, the 'request' object exposes metadata about the current request, including 'request.path', 'request.operation', 'request.data', and 'request.auth'. Policies use these fields to make allow/deny decisions based on what is being requested and by whom.
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.