[ Vault Enterprise] Describe and Interpret Multi-Tenancy with Namespaces VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is adopting Vault Enterprise and needs to separate secrets for three environments: dev, staging, and prod. The security team requires that the prod environment have stricter access controls and that no developer can access prod secrets. The dev and staging environments can have more relaxed controls. Which namespace structure best meets these requirements?

   • ACreate top-level namespaces for dev, staging, and prod, and apply different policies to each namespace.
   • BCreate a top-level namespace for prod only, and keep dev and staging in the root namespace.
   • CCreate a single namespace and use different mount paths for each environment.
   • DCreate a top-level namespace for each environment, but use the same policy for all three.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary benefit of the path-based isolation provided by namespace hierarchies in Vault Enterprise?

   • AIt automatically replicates data across all namespaces for high availability
   • BIt enables administrators to define policies and mount secrets at distinct paths, reducing the risk of cross-tenant interference
   • CIt eliminates the need for authentication methods in each namespace
   • DIt allows multiple Vault clusters to share the same storage backend
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A Vault Enterprise license has a namespace quota of 5. The organization has 3 top-level namespaces, and one of them has 2 child namespaces. How many additional namespaces can be created?

   • A3
   • B2
   • C1
   • D0
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In Vault Enterprise, how do namespaces interact with performance replication?

   • APerformance replication only replicates the root namespace and ignores child namespaces
   • BNamespaces are not affected by performance replication; only secrets engines are replicated
   • CPerformance replication requires a separate replication setup for each namespace
   • DPerformance replication replicates all namespaces from the primary cluster to secondary clusters, but each namespace can be selectively filtered
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common use case for Vault Enterprise namespaces?

   • AEnabling high availability by replicating data across multiple clusters
   • BSeparating secrets and policies for different teams within the same organization
   • CImproving performance by caching secrets in memory
   • DSimplifying the Vault configuration by using a single policy for all users
   Reveal Solution Discussion Select an answer first