What is the purpose of using PGP encryption during a rekey operation?

To speed up the rekey process by compressing the key shares

To allow the rekey to be performed without a root token

To sign the unseal keys to verify their authenticity

To encrypt the unseal keys so that only the intended recipient can decrypt them

A Vault cluster uses PGP-encrypted unseal keys. The team wants to rekey and ensure that the new unseal keys are also PGP-encrypted. The operator has the PGP public keys of all key holders. What is the correct way to configure the rekey?

Provide the PGP private keys in the rekey request.

Use the same PGP key for all key shares.

Disable PGP encryption during rekey and re-encrypt later.

Provide the PGP public keys in the rekey request, one for each key share.

A Vault cluster has 5 unseal keys with a threshold of 3. An operator initiates a rekey with a new threshold of 4. After collecting 3 key shares, the operator realizes that one of the key holders used an incorrect key. The operator wants to restart the rekey process. What should the operator do?

Continue with the 3 valid key shares and wait for the 4th.

Cancel the rekey and start a new one.

Use the recovery keys to complete the rekey.

Restart the Vault server to reset the rekey.

What is the purpose of rotating the encryption key in Vault?

To change the master key used for unsealing

To generate a new key for encrypting data in the storage backend, invalidating old ciphertext

To change the authentication methods

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 8

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 16–20

16foundation · easy
What is the purpose of using PGP encryption during a rekey operation?
Select an answer first
17expert · medium
A Vault cluster uses PGP-encrypted unseal keys. The team wants to rekey and ensure that the new unseal keys are also PGP-encrypted. The operator has the PGP public keys of all key holders. What is the correct way to configure the rekey?
Select an answer first
18expert · medium
A Vault cluster has 5 unseal keys with a threshold of 3. An operator initiates a rekey with a new threshold of 4. After collecting 3 key shares, the operator realizes that one of the key holders used an incorrect key. The operator wants to restart the rekey process. What should the operator do?
Select an answer first
19foundation · easy
What is the purpose of rotating the encryption key in Vault?
Select an answer first
20foundation · easy
Which command is used to initiate a rekey operation in Vault?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.