An operator is in the middle of root token regeneration and has contributed 2 of 3 required unseal keys. The operator realizes the OTP was generated incorrectly. What should the operator do?

Cancel the current process and restart with a new OTP

Complete the process and then regenerate again with a new OTP

Use a different OTP for the remaining unseal keys

Continue with the process and use the incorrect OTP to decode

In the root token regeneration workflow, what is the role of the unseal keys?

They are used to decrypt the root token after generation.

They are used to re-encrypt the new root token for storage.

They are submitted to provide the required authorization to generate the new root token.

They are used to verify the identity of the operators.

In the root token generation process, what is the significance of the order in which unseal keys are contributed?

The keys must be contributed in reverse order of their creation.

The order does not matter; any key can be contributed at any time.

The keys must be contributed in the order they were originally generated.

The keys must be contributed in alphabetical order of the key holder's name.

A Vault administrator needs to regenerate the root token but is concerned about the OTP being exposed. What is the best practice for handling the OTP during the process?

Use the same OTP for multiple regeneration processes

Share the OTP with all unseal key holders so they can decode the token

Keep the OTP secret and only use it to decode the final token

Store the OTP in a file on the Vault server

After successfully generating a new root token, what should be done with the old root token?

Revoke it to ensure it can no longer be used.

Keep it as a backup in case the new token is lost.

Store it in a secure location for future use.

Use it to authenticate to the new root token.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 7

Regenerate a Root Token VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

5concepts

Questions 1–5

1application · medium
An operator is in the middle of root token regeneration and has contributed 2 of 3 required unseal keys. The operator realizes the OTP was generated incorrectly. What should the operator do?
Select an answer first
2foundation · easy
In the root token regeneration workflow, what is the role of the unseal keys?
Select an answer first
3foundation · easy
In the root token generation process, what is the significance of the order in which unseal keys are contributed?
Select an answer first
4application · medium
A Vault administrator needs to regenerate the root token but is concerned about the OTP being exposed. What is the best practice for handling the OTP during the process?
Select an answer first
5foundation · easy
After successfully generating a new root token, what should be done with the old root token?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.