In the TLS certificate auth method, what does a certificate role define?

Which certificate attributes are allowed and what policies are assigned

Which certificate revocation list to use

Which CA signs the client certificates

Which certificate format is accepted

Which CLI command tunes the default lease TTL of an enabled authentication method?

vault auth enable -default-lease-ttl=1h userpass/

vault auth tune -default-lease-ttl=1h userpass/

vault write auth/userpass/tune -default-lease-ttl=1h

vault secrets tune -default-lease-ttl=1h userpass/

In the AppRole auth method, what is the purpose of a role ID?

It is the same as the secret ID

It is a secret that must be kept confidential

It identifies the AppRole role that the machine is trying to authenticate as

It is used to encrypt the secret ID

An application uses OIDC auth with Okta. The OIDC role 'oidc-role' has `groups_claim=groups` and `token_policies=default`. Users in the Okta group 'vault-admins' can log in, but they do not receive the 'admin' policy. The administrator verifies that the 'groups' claim is present in the OIDC token. What is the most likely missing configuration?

The Okta application is missing the 'groups' claim; configure the app to include it.

The user must be added to a Vault identity group manually.

The role is missing `token_policies=admin`; add it to the role so the 'vault-admins' group maps to the admin policy.

The OIDC provider URL is incorrect; update `auth/oidc/config` with the correct Okta endpoint.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 5

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

16concepts

16 Concepts in This Objective

Authentication method overview
Enable authentication methods
Configure authentication method parameters
Tune authentication method settings
Disable authentication methods
List and inspect authentication methods
Authentication method path management
Token-based authentication configuration
Userpass authentication configuration
AppRole authentication configuration
LDAP authentication configuration
Kubernetes authentication configuration
JWT/OIDC authentication configuration
TLS certificate authentication configuration
Authentication method policy association
Authentication method troubleshooting

Questions 6–10

6foundation · easy
In the TLS certificate auth method, what does a certificate role define?
Select an answer first
7foundation · easy
Which CLI command tunes the default lease TTL of an enabled authentication method?
Select an answer first
8foundation · easy
In the AppRole auth method, what is the purpose of a role ID?
Select an answer first
9foundation · easy
Which setting controls whether an authentication method appears in the list of enabled methods?
Select an answer first
10expert · medium
An application uses OIDC auth with Okta. The OIDC role 'oidc-role' has `groups_claim=groups` and `token_policies=default`. Users in the Okta group 'vault-admins' can log in, but they do not receive the 'admin' policy. The administrator verifies that the 'groups' claim is present in the OIDC token. What is the most likely missing configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

In the TLS certificate auth method, what does a certificate role define?

Which CLI command tunes the default lease TTL of an enabled authentication method?

In the AppRole auth method, what is the purpose of a role ID?

Which setting controls whether an authentication method appears in the list of enabled methods?

Keep studying — Create a working Vault server configuration given a scenario