[ Vault Enterprise] Describe and Interpret Multi-Tenancy with Namespaces VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A managed service provider (MSP) hosts Vault Enterprise for three separate client companies. Each client must have its own set of policies, secrets engines, and auth methods, and no client should be able to list or access another client's configuration. The MSP also wants to delegate administrative duties for each client to a separate ops team. What is the most appropriate way to structure the Vault environment?

   • ACreate a single namespace for all clients and use distinct mount paths for each client's secrets engines.
   • BCreate a namespace for each client and a global policy that grants access to all namespaces to the ops teams.
   • CCreate a top-level namespace for each client, then assign each client's ops team an admin policy scoped to their namespace.
   • DCreate a namespace for each client and rely on the root token for all administrative tasks.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which CLI command is used to create a new namespace in Vault Enterprise?

   • Avault write sys/namespaces/<namespace_name>
   • Bvault secrets enable -namespace=<namespace_name>
   • Cvault operator init -namespace=<namespace_name>
   • Dvault namespace create <namespace_name>
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the licensing requirement for using namespaces in Vault Enterprise?

   • ANamespaces require a Vault Enterprise license, and the number of namespaces is limited by the license's namespace quota
   • BNamespaces are free but require a support contract
   • CNamespaces are available in all Vault editions, including open source
   • DNamespaces require a separate license per namespace
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What happens when you attempt to create a namespace that exceeds the namespace quota in Vault Enterprise?

   • AThe namespace creation fails with an error indicating the quota has been exceeded
   • BThe namespace is created and the quota is automatically increased
   • CThe namespace is created but marked as read-only
   • DThe namespace is created but only accessible with a special token
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   A Vault Enterprise administrator is configuring a new namespace for a separate business unit. Which statement accurately describes how namespaces affect isolation and access control?

   • AA token created in a parent namespace automatically has access to all child namespaces unless explicitly denied.
   • BNamespaces provide network-level isolation, preventing any network traffic between namespaces.
   • CPolicies, secrets, and auth methods are scoped to the namespace in which they are created, and a token's effective permissions are limited to the policies assigned within that namespace.
   • DPolicies are global across all namespaces, but secrets and auth methods are isolated per namespace.
   Reveal Solution Discussion Select an answer first