How can an operator cancel an ongoing rekey operation?

By running `vault operator rekey cancel`

By deleting the rekey progress file

An operator initiates a rekey operation on a Vault cluster with a threshold of 3. Two unseal key holders have submitted their keys, but the third is on vacation and cannot participate for a week. The team needs to proceed with the rekey immediately. What should the operator do?

Restart the Vault server to reset the rekey operation and try again.

Use the two submitted keys to complete the rekey now.

Wait for the third key holder to return and continue the rekey with the two submitted keys.

Cancel the rekey operation and start a new one when the third key holder is available.

A company requires that unseal keys be encrypted with PGP when distributed to key holders. During a rekey, the operator wants to ensure that each key share is encrypted with the respective holder's PGP public key and that a backup of the rekey keys is stored securely. What should the operator configure?

Provide a PGP key for each key share and enable the backup option in the rekey request.

Use the recovery keys to encrypt the unseal keys and store them in the backup.

Provide a single PGP key for all key shares and disable backup to avoid duplication.

Enable backup and use the root token to encrypt the key shares.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 8

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 11–15

11foundation · easy
How can an operator cancel an ongoing rekey operation?
Select an answer first
12application · easy
An operator initiates a rekey operation but needs to check how many key shares have been submitted so far. What should the operator do?
Select an answer first
13application · medium
An operator initiates a rekey operation on a Vault cluster with a threshold of 3. Two unseal key holders have submitted their keys, but the third is on vacation and cannot participate for a week. The team needs to proceed with the rekey immediately. What should the operator do?
Select an answer first
14foundation · easy
Which command triggers a rotation of the underlying encryption key?
Select an answer first
15application · medium
A company requires that unseal keys be encrypted with PGP when distributed to key holders. During a rekey, the operator wants to ensure that each key share is encrypted with the respective holder's PGP public key and that a backup of the rekey keys is stored securely. What should the operator configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

How can an operator cancel an ongoing rekey operation?

An operator initiates a rekey operation but needs to check how many key shares have been submitted so far. What should the operator do?

An operator initiates a rekey operation on a Vault cluster with a threshold of 3. Two unseal key holders have submitted their keys, but the third is on vacation and cannot participate for a week. The team needs to proceed with the rekey immediately. What should the operator do?

Which command triggers a rotation of the underlying encryption key?

Keep studying — Create a working Vault server configuration given a scenario