Vault Enterprise Vault Server Configuration Practice Question
You need to rotate the Vault master key (rekey). Which command should be used if you want to change the key configuration (e.g., number of shares) while performing the rekey?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vault operator rekey -init
The 'vault operator rekey -init' command is used to start the process of changing the master key configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
vault operator rekey -init
Why this is correct
This initializes the rekey process allowing for new threshold/shares.
- ✗
vault operator unseal
Why it's wrong here
This is only for unsealing, not rekeying.
- ✗
vault secrets tune
Why it's wrong here
This is for tuning secret engines.
- ✗
vault operator rotate
Why it's wrong here
Rotate is for the unseal key, not the master key configuration.
About these practice questions
Courseiva writes every Vault Enterprise question from scratch — 184 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official HashiCorp exam blueprint
This Vault Enterprise practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Vault Enterprise exam.