In the control group workflow, what is the role of the 'approver'?

To authorize the pending request by submitting their approval

To revoke the requester's token after the request is fulfilled

To initiate the request for access to a secret

To configure the control group policy in Vault

What is the primary function of a control group token?

To encrypt the secret before it is stored in Vault

To authenticate the requester to Vault

To track the pending request and allow approvers to submit their approvals

To revoke the requester's access after the request is completed

How does an approver use a control group token to approve a request?

By entering the token into the Vault CLI as a new authentication method

By deleting the token from the Vault server

By submitting the token to the Vault API with their own credentials

By sending the token to the requester via email

In Vault Enterprise, what is a control group?

A group of users who are required to approve a request before access is granted

A group of secrets that are managed together for rotation

A group of Vault servers that replicate data for high availability

A group of policies that are applied to a specific user

A Vault Enterprise administrator wants to ensure that a control group is applied to all read operations on the 'secret/data/prod' path. The administrator has written a policy with a control group block. What else must be true for the control group to take effect?

The policy must be assigned to the tokens or entities that will attempt to read the path.

The control group must be enabled globally in the Vault configuration file.

The control group token TTL must be set to a value greater than the secret's lease duration.

The secret path must be created under a namespace that has control groups enabled.

HashiCorp Certified:Vault Operations Professional

Domain 7Objective 4

[ Vault Enterprise] Define Control Groups and Describe Their Basic Workflow VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Part of the Configure access control domain, which makes up ~13% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~12–21 in this domain), expect 2–4 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

4concepts

Questions 6–10

6foundation · easy
In the control group workflow, what is the role of the 'approver'?
Select an answer first
7foundation · easy
What is the primary function of a control group token?
Select an answer first
8foundation · easy
How does an approver use a control group token to approve a request?
Select an answer first
9foundation · easy
In Vault Enterprise, what is a control group?
Select an answer first
10application · medium
A Vault Enterprise administrator wants to ensure that a control group is applied to all read operations on the 'secret/data/prod' path. The administrator has written a policy with a control group block. What else must be true for the control group to take effect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.