Write, Deploy, and Troubleshoot ACL Policies VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which HCL block correctly defines a Vault ACL policy that grants read and list capabilities on the secret/data/team-a/* path?

   • Apath "secret/data/team-a/*" { capabilities = ["read", "list", "delete"] }
   • Bpath "secret/data/team-a/*" { capabilities = ["read", "list", "sudo"] }
   • Cpath "secret/data/team-a/*" { capabilities = ["read", "list"] }
   • Dpath "secret/data/team-a/*" { capabilities = ["read", "list", "create"] }
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How can you associate an ACL policy with a token in Vault?

   • ABy setting the `-policy` flag when creating the token
   • BBy using the `vault policy attach` command
   • CBy editing the token's metadata
   • DBy writing the policy to the token's path
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A user reports that they are denied access to a path even though they have a policy that grants read. What is the most likely cause?

   • AThe path in the policy is incorrect.
   • BThe policy is too long.
   • CThe policy is not attached to the token or entity.
   • DThe token is expired.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Vault command can be used to check the capabilities of a token on a specific path?

   • Avault read <path>
   • Bvault token capabilities <token> <path>
   • Cvault token lookup <token>
   • Dvault policy list
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of the `vault policy read` command?

   • ATo test a policy against a token
   • BTo list all policies
   • CTo create a new policy
   • DTo display the contents of an existing policy
   Reveal Solution Discussion Select an answer first