A Vault cluster was initialized with 5 unseal keys and a threshold of 3. After a security incident, the root token was compromised and the unseal key holders have changed. The team wants to invalidate the old unseal keys and generate a new root token without reinitializing the cluster. What should the team do?

Run a rotate operation on the encryption key to generate a new root token.

Run a rekey operation with a new threshold and collect the required number of new key shares.

Reinitialize the cluster with new unseal keys and a new root token.

Use the recovery keys to generate a new root token without changing the unseal keys.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 8

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 21–21

21application · medium
A Vault cluster was initialized with 5 unseal keys and a threshold of 3. After a security incident, the root token was compromised and the unseal key holders have changed. The team wants to invalidate the old unseal keys and generate a new root token without reinitializing the cluster. What should the team do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Rekey Vault and Rotate Encryption Keys VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Questions 21–21

Keep studying — Create a working Vault server configuration given a scenario