[ Vault Enterprise] Define Control Groups and Describe Their Basic Workflow VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 4)

Questions 16–17

1. 16expert · hard

   A Vault Enterprise administrator is designing a control group for a secret that is read by an automated CI/CD pipeline. The pipeline uses a Vault token that is not associated with any human user. The security team requires that a human approve each read. What is the best way to implement this?

   • AUse a response wrapping token to deliver the secret to the pipeline after a human approves the unwrap.
   • BAttach a policy with a control group to the pipeline's token, requiring approval from a group of human users.
   • CUse a periodic token for the pipeline that bypasses control groups.
   • DCreate a separate policy for the pipeline that grants read access without a control group, and rely on audit logs for accountability.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of a Vault Enterprise control group?

   • ATo restrict access to secrets based on the client's IP address
   • BTo encrypt secrets with a key held by multiple administrators
   • CTo automatically rotate secrets on a scheduled basis
   • DTo require approval from a specified set of authorized users before a secret is released
   Reveal Solution Discussion Select an answer first