When initiating a rekey, what does the `-key-threshold` parameter specify?

The total number of unseal keys to be generated

The minimum number of unseal keys required to reconstruct the master key

The number of times the rekey operation can be attempted

The number of unseal keys required to cancel the rekey operation

What is the primary purpose of rekeying Vault?

To invalidate all existing tokens and force users to re-authenticate

To change the encryption key used to protect data stored in the backend

To recover Vault after a disaster by restoring from a backup

To generate new unseal keys and a new root token, changing the key shares and threshold

What does enabling backup during a rekey operation allow?

Automatically sending the unseal keys to a remote server

Storing the unseal keys in a backup file that can be retrieved later

Creating a backup of the entire Vault data store

Allowing the rekey to be undone if needed

A Vault cluster is initialized with 5 unseal keys and a threshold of 3. The team wants to rekey to a threshold of 4 with 7 key shares. The operator has collected 4 key shares. What is the next step to complete the rekey?

Wait for 3 more key shares to reach 7.

Use the recovery keys to complete the rekey.

Submit the 4th key share to complete the rekey.

Cancel the rekey and start over with a threshold of 3.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 8

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 1–5

1foundation · easy
Which command shows the current encryption key rotation status?
Select an answer first
2foundation · easy
When initiating a rekey, what does the `-key-threshold` parameter specify?
Select an answer first
3foundation · easy
What is the primary purpose of rekeying Vault?
Select an answer first
4foundation · easy
What does enabling backup during a rekey operation allow?
Select an answer first
5expert · medium
A Vault cluster is initialized with 5 unseal keys and a threshold of 3. The team wants to rekey to a threshold of 4 with 7 key shares. The operator has collected 4 key shares. What is the next step to complete the rekey?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.