What is the relationship between an entity and a group in Vault?

A group can contain only entities, not other groups

Entities and groups are interchangeable in policies

An entity can be a member of multiple groups

An entity can belong to only one group

An organization has an internal Vault identity group named 'platform-engineers' with a policy granting read access to CI/CD secrets. They also have an external group synced from Okta named 'okta-platform' that contains the same users. The team wants to ensure that when a user is removed from Okta, their Vault access is revoked immediately. What is the best approach?

Attach the policy to both the internal and external groups and keep them in sync manually.

Create a nested group that includes both the internal and external groups.

Keep the internal group and manually remove users from it when they leave Okta.

Use only the external group 'okta-platform' and attach the policy to it.

A user logs in to Vault using two different auth methods: one with a username 'john' and another with an email 'john@example.com'. The administrator wants to ensure that Vault treats these as the same user for policy purposes. What should the administrator configure?

Configure both auth methods to use the same mount path.

Create an entity and add both auth method identities as aliases to that entity.

Create a group and add both usernames to it.

Create two entities and merge them using the Vault CLI.

HashiCorp Certified:Vault Operations Professional

Domain 7Objective 1

Interpret Vault Identity Entities and Groups VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Part of the Configure access control domain, which makes up ~13% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~12–21 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

Questions 16–18

16foundation · easy
What is the relationship between an entity and a group in Vault?
Select an answer first
17application · medium
An organization has an internal Vault identity group named 'platform-engineers' with a policy granting read access to CI/CD secrets. They also have an external group synced from Okta named 'okta-platform' that contains the same users. The team wants to ensure that when a user is removed from Okta, their Vault access is revoked immediately. What is the best approach?
Select an answer first
18application · medium
A user logs in to Vault using two different auth methods: one with a username 'john' and another with an email 'john@example.com'. The administrator wants to ensure that Vault treats these as the same user for policy purposes. What should the administrator configure?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Interpret Vault Identity Entities and Groups VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Questions 16–18

What is the relationship between an entity and a group in Vault?

A user logs in to Vault using two different auth methods: one with a username 'john' and another with an email 'john@example.com'. The administrator wants to ensure that Vault treats these as the same user for policy purposes. What should the administrator configure?

Keep studying — Configure access control