HashiCorp Certified:Vault Operations Professional
Domain 1Objective 8
Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)
Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)
21questions here
5free pages
6concepts
Questions 6–10
- 6
A Vault operator needs to rotate the encryption key but wants to ensure that the rotation does not affect the unseal keys. What should the operator do?
Select an answer first - 7
A Vault operator wants to automate the rotation of the encryption key on a regular basis. What is the recommended way to achieve this?
Select an answer first - 8
An operator initiates a rekey operation but realizes that the threshold was set incorrectly. The operator wants to stop the current rekey and start over with the correct threshold. What should the operator do?
Select an answer first - 9
A security auditor asks the Vault operator to provide evidence that the encryption key has been rotated within the last 90 days. The operator needs to check the current encryption key status. What command should the operator use?
Select an answer first - 10
A Vault cluster is initialized with 5 unseal keys and a threshold of 3. The security team wants to rekey to a threshold of 4 with 7 key shares, and also wants to encrypt the key shares with PGP and enable backup. During the rekey, the operator has collected 4 key shares. What is the minimum number of additional key shares needed to complete the rekey?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.