Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 8)

Questions 36–39

1. 36foundation · easy

   In the JWT/OIDC auth method, what does the 'bound_audiences' parameter do?

   • AIt specifies which claims a JWT must contain to be accepted
   • BIt specifies which audiences a JWT must contain to be accepted
   • CIt specifies which issuers a JWT must contain to be accepted
   • DIt specifies which roles a JWT must contain to be accepted
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   How are policies associated with tokens issued by an authentication method?

   • ABy setting the 'policies' parameter on the Vault server configuration
   • BBy setting the 'token_policies' parameter on the auth method or its roles/users
   • CBy creating a role in the policy system
   • DBy writing a policy to the auth method's path
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the API endpoint to read the configuration of an auth method mounted at 'userpass'?

   • AGET /v1/auth/userpass
   • BGET /v1/sys/auth/userpass
   • CPOST /v1/sys/auth/userpass
   • DGET /v1/sys/mounts/userpass
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An administrator tunes the AppRole auth method at the default path to set `default_lease_ttl=1h` and `max_lease_ttl=24h`. A role 'app-role' is created with `token_ttl=30m` and `token_max_ttl=12h`. What is the effective token TTL for a token issued via this role?

   • A12 hours, because the role's `token_max_ttl` is the effective TTL.
   • B1 hour, because the mount default applies when the role does not specify a TTL.
   • C24 hours, because the mount max TTL caps the token lifetime.
   • D30 minutes, because the role's `token_ttl` overrides the mount default.
   Reveal Solution Discussion Select an answer first