Sample questions
HashiCorp Certified: Vault Operations Professional (Vault Enterprise) (Vault Enterprise) practice questions
You are writing a Sentinel policy to restrict secret access. Which parameter provides the current request's metadata, such as the path or operation type?
When using Namespace-based multi-tenancy, which statement is true regarding the root namespace?
When configuring Sentinel policies for Vault, what is the 'EGP' policy type?
An application is configured to use a Batch token. Which of the following operations will fail when using a Batch token?
Which TWO configurations are required to effectively monitor Vault in a production environment?
A Vault administrator needs to grant an application read access to a specific path in the KV v2 secrets engine. Which policy capability must be included?
You have a Performance Replication setup. A client sends a write request to a performance standby node. What happens to this request?
Which API endpoint should you use to check if a specific policy exists in the system?
Which TWO fields are essential in an ACL policy defined in HCL?
You notice that the 'seal status' on your DR secondary differs from the primary cluster. What does this indicate?
Which TWO of the following are valid reasons why a node might fail to join an existing Raft cluster?
When configuring an HSM for Auto-Unseal, which parameter identifies the specific hardware partition to be used?
Which THREE of the following are required configuration parameters in the 'seal' stanza when using a PKCS#11 HSM?
You are analyzing Vault's performance and notice high latency in the 'core.fetch_token' metric. What does this suggest?
Which THREE actions should be taken when analyzing an audit log to identify potential security incidents?
Which TWO of the following statements are true regarding Performance Standby nodes?
When using Vault Agent to authenticate with the AWS auth method, which parameter is required in the 'method' block to identify the IAM role?
What does the 'root' policy in Vault provide?
Which TWO statements are true regarding the use of Sentinel in Vault Enterprise?
An organization wants to enforce that a specific group of users can only request secrets if a manager approves the request via a Control Group. Which object must be created to defi…
If you need to grant a group of developers access to all paths starting with 'secret/data/developers/', which HCL syntax is correct?
Which TWO factors contribute to the size and performance of Vault audit logs?
Which TWO of the following are components of a Control Group configuration?
When migrating from an external storage backend to Raft, which command is used to capture the current state of the cluster for migration?