A Kubernetes cluster is configured with Vault's Kubernetes auth method. Pods in the 'default' namespace can authenticate, but pods in the 'production' namespace cannot. The role 'k8s-role' has `bound_service_account_names=app-sa` and `bound_service_account_namespaces=default`. What is the most likely reason for the failure?

The Kubernetes host URL is incorrect; update `auth/kubernetes/config` with the correct cluster endpoint.

The service account JWT is missing; add a `serviceAccountName` to the production pods.

The role is bound only to the 'default' namespace; create a new role or update the existing one to include 'production'.

The role name is misspelled in the production pods' annotations.

Which CLI command enables the AppRole auth method at the custom path 'my-approle'?

vault auth enable -path=my-approle approle

vault auth enable my-approle approle

vault auth enable -mount=my-approle approle

vault auth enable approle my-approle

A user reports that 'vault login -method=userpass username=alice password=wrong' fails. What is the most likely cause?

The userpass auth method is not enabled

In the Kubernetes auth method, what is the purpose of a role binding?

It binds a Kubernetes secret to a Vault policy

It maps a Kubernetes service account to Vault policies

It binds a Vault token to a Kubernetes pod

It binds the Kubernetes host to a Vault cluster

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 5

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 7)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

16concepts

16 Concepts in This Objective

Authentication method overview
Enable authentication methods
Configure authentication method parameters
Tune authentication method settings
Disable authentication methods
List and inspect authentication methods
Authentication method path management
Token-based authentication configuration
Userpass authentication configuration
AppRole authentication configuration
LDAP authentication configuration
Kubernetes authentication configuration
JWT/OIDC authentication configuration
TLS certificate authentication configuration
Authentication method policy association
Authentication method troubleshooting

Questions 31–35

31application · medium
A Kubernetes cluster is configured with Vault's Kubernetes auth method. Pods in the 'default' namespace can authenticate, but pods in the 'production' namespace cannot. The role 'k8s-role' has `bound_service_account_names=app-sa` and `bound_service_account_namespaces=default`. What is the most likely reason for the failure?
Select an answer first
32foundation · easy
Which CLI command enables the AppRole auth method at the custom path 'my-approle'?
Select an answer first
33foundation · easy
A user reports that 'vault login -method=userpass username=alice password=wrong' fails. What is the most likely cause?
Select an answer first
34foundation · easy
What is the API endpoint to enable the AppRole authentication method at the path 'approle'?
Select an answer first
35foundation · easy
In the Kubernetes auth method, what is the purpose of a role binding?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 7)

Questions 31–35

Which CLI command enables the AppRole auth method at the custom path 'my-approle'?

A user reports that 'vault login -method=userpass username=alice password=wrong' fails. What is the most likely cause?

What is the API endpoint to enable the AppRole authentication method at the path 'approle'?

In the Kubernetes auth method, what is the purpose of a role binding?

Keep studying — Create a working Vault server configuration given a scenario