Interpret Vault Identity Entities and Groups VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A Vault administrator creates an internal group 'devs' with a policy granting read access to development secrets. They also create a parent group 'all-staff' with a policy granting read access to general company secrets. The 'devs' group is added as a child of 'all-staff'. What access will a member of 'devs' have?

   • ARead access to both development secrets and general company secrets.
   • BRead access only to development secrets.
   • CNo access because group nesting is not allowed.
   • DRead access only to general company secrets.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A user logs in to Vault using GitHub authentication with the username 'dev-jane'. Later, the same user logs in using LDAP with the username 'jane.doe'. The user expects the same Vault policies in both sessions. What must be configured to achieve this?

   • ACreate an entity and add two aliases: one for the GitHub auth method and one for the LDAP auth method.
   • BAdd both usernames to the same internal group.
   • CConfigure the GitHub and LDAP auth methods to use the same mount path.
   • DCreate two entities and link them with a group.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is an entity alias in Vault?

   • AA temporary token that grants access to an entity's secrets
   • BA secondary name for an entity that can be used in policies
   • CA mapping from an authentication method identity to an entity
   • DA group that contains entities from the same authentication method
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does Vault embed identity information in tokens?

   • ABy including the entity's alias names in the token
   • BBy storing the full entity object inside the token
   • CBy encrypting the entity's policies into the token
   • DBy associating the token with an entity ID and group IDs
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses Vault with an external identity provider (IdP) that syncs groups. The IdP has a group 'managers' that should grant read access to the 'secret/hr' path. The administrator wants to ensure that when a user is added to the 'managers' group in the IdP, they automatically get access in Vault. What should the administrator do?

   • ACreate a policy that references the IdP group name directly.
   • BCreate an external group in Vault named 'managers' and attach the policy to it.
   • CCreate an entity for each user and attach the policy to each entity.
   • DCreate an internal group in Vault named 'managers' and manually add users.
   Reveal Solution Discussion Select an answer first