Interpret Vault Identity Entities and Groups VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which Vault feature allows a single user who logs in via both LDAP and GitHub to be treated as the same identity for policy purposes?

   • AAn external group
   • BA Vault namespace
   • CIdentity entity with multiple aliases
   • DA token with multiple policies
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In Vault, what is the purpose of an identity entity?

   • ATo group multiple Vault clusters under a single administrative domain
   • BTo define a set of policies that can be attached to any token
   • CTo represent a single user or service across multiple authentication methods
   • DTo store secret data for a specific user
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What happens to the policies attached to a group when an entity becomes a member of that group?

   • AThe entity's own policies are replaced by the group's policies
   • BThe entity must be explicitly granted the group's policies
   • CThe group's policies are removed from the group
   • DThe entity inherits the group's policies
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses both LDAP and OIDC for authentication. A user named Alice logs in via LDAP as 'alice' and via OIDC as 'alice@example.com'. The security team wants Alice to have the same Vault policies regardless of which method she uses, and they want to avoid duplicating policy assignments. What should they configure?

   • AAttach the policies directly to the LDAP and OIDC mount paths using path-based policy rules.
   • BCreate an entity for Alice, add an alias for each auth method, and attach the policies to the entity.
   • CCreate an external group for each auth method and add Alice's respective username to each group.
   • DCreate two separate entities, one for LDAP and one for OIDC, and attach the same policies to both.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does an external group differ from an internal group in Vault?

   • AExternal groups are managed by an external identity provider, while internal groups are managed within Vault
   • BExternal groups are used for authentication, while internal groups are used for authorization
   • CExternal groups are stored in a separate database, while internal groups are stored in Vault's storage backend
   • DExternal groups can only contain external entities, while internal groups can only contain internal entities
   Reveal Solution Discussion Select an answer first