Which CLI command generates a new secret ID for an existing AppRole role named 'my-role'?

vault write -f auth/approle/role/my-role/secret-id

vault write auth/approle/role/my-role secret_id=generate

vault create auth/approle/role/my-role/secret-id

vault read auth/approle/role/my-role/secret-id

An organization enables TLS certificate auth at the default path. Clients present certificates signed by an internal CA. Authentication fails with 'certificate not authorized'. The CA certificate is uploaded to `auth/cert/certs/ca`. What is the most likely missing configuration?

Upload the client certificate to `auth/cert/certs/client`.

Create a role for the CA: `vault write auth/cert/certs/ca allowed_common_names=internal.example.com`.

Enable the auth method with `-path=cert` instead of the default.

Set `vault write auth/cert/config default_lease_ttl=1h`.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 5

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 6)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

16concepts

16 Concepts in This Objective

Authentication method overview
Enable authentication methods
Configure authentication method parameters
Tune authentication method settings
Disable authentication methods
List and inspect authentication methods
Authentication method path management
Token-based authentication configuration
Userpass authentication configuration
AppRole authentication configuration
LDAP authentication configuration
Kubernetes authentication configuration
JWT/OIDC authentication configuration
TLS certificate authentication configuration
Authentication method policy association
Authentication method troubleshooting

Questions 26–30

26foundation · easy
Which CLI command disables the LDAP authentication method mounted at 'ldap'?
Select an answer first
27foundation · easy
Which parameter is required when configuring the LDAP auth method to specify the LDAP server address?
Select an answer first
28foundation · easy
Which CLI command lists all enabled authentication methods?
Select an answer first
29foundation · easy
Which CLI command generates a new secret ID for an existing AppRole role named 'my-role'?
Select an answer first
30application · medium
An organization enables TLS certificate auth at the default path. Clients present certificates signed by an internal CA. Authentication fails with 'certificate not authorized'. The CA certificate is uploaded to `auth/cert/certs/ca`. What is the most likely missing configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 6)

Questions 26–30

Which CLI command disables the LDAP authentication method mounted at 'ldap'?

Which parameter is required when configuring the LDAP auth method to specify the LDAP server address?

Which CLI command lists all enabled authentication methods?

Which CLI command generates a new secret ID for an existing AppRole role named 'my-role'?

An organization enables TLS certificate auth at the default path. Clients present certificates signed by an internal CA. Authentication fails with 'certificate not authorized'. The CA certificate is uploaded to `auth/cert/certs/ca`. What is the most likely missing configuration?

Keep studying — Create a working Vault server configuration given a scenario