What is the primary purpose of an internal group in Vault identity?

To synchronize with an external identity provider

To store encrypted secrets for group members

To aggregate entities for policy assignment

To define a set of authentication methods

In a Vault policy, how can you reference metadata associated with an entity?

Using the `entity.name` parameter in the policy path

Using the `alias.name` parameter in the policy path

Using the `token.metadata` parameter in the policy path

Using the `identity.entity.metadata` parameter in the policy path

A Vault policy needs to allow a user to read a secret only if they belong to the 'finance' group. The policy is being written for a token that is issued after login. How can the policy reference the group membership?

Use the 'identity.groups.names.finance' parameter in the policy path.

Use the 'token.policies' parameter in the policy path.

Use the 'auth.method' parameter in the policy path.

Use the 'entity.name' parameter in the policy path.

In Vault, how do policies from nested groups affect an entity's effective permissions?

Policies from nested groups are ignored to avoid conflicts

The entity must explicitly request policies from nested groups

Policies from all parent groups are inherited by the entity

Only policies from the immediate parent group are applied

How are policies attached to an identity entity in Vault?

By creating a token with the policy and linking it to the entity

By assigning the policy to the entity's alias

By adding the policy name to the entity's policy list

By writing a policy that references the entity's ID

HashiCorp Certified:Vault Operations Professional

Domain 7Objective 1

Interpret Vault Identity Entities and Groups VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Part of the Configure access control domain, which makes up ~13% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~12–21 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

Questions 11–15

11foundation · easy
What is the primary purpose of an internal group in Vault identity?
Select an answer first
12foundation · easy
In a Vault policy, how can you reference metadata associated with an entity?
Select an answer first
13application · medium
A Vault policy needs to allow a user to read a secret only if they belong to the 'finance' group. The policy is being written for a token that is issued after login. How can the policy reference the group membership?
Select an answer first
14foundation · easy
In Vault, how do policies from nested groups affect an entity's effective permissions?
Select an answer first
15foundation · easy
How are policies attached to an identity entity in Vault?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.