HashiCorp Vault & Secrets Management Quiz

1. Which policy decision in Vault denies access to a resource?

Permit

Allow

Deny

Restrict

2. Which Vault feature allows secrets to be automatically revoked after a specified time period?

Secret expiration

TTL (Time To Live)

Secret rotation

Access revocation

Submit

4. True or False: Vault's KV secret engine versions all stored secrets by default.

True

False

5. Which Vault authentication method integrates with OpenID Connect providers like Okta or Auth0?

OIDC

SAML

Kerberos

RADIUS

Submit

8. Which Vault feature allows you to distribute unseal keys across multiple parties to prevent single points of failure?

Key sharding

Shamir secret sharing

Multi-party computation

Distributed encryption

9. True or False: Vault can automatically unseal itself after a restart without manual intervention.

True

False

Submit

11. What is the primary function of HashiCorp Vault?

Manage and store secrets securely with encryption and audit logging

Provision virtual machines across multiple cloud providers

Monitor application performance metrics in real time

Deploy Kubernetes clusters automatically

Submit

13. True or False: Vault's audit logging is optional and should be disabled in production for performance.

True

False

14. Which Vault secret engine provides integration with external databases like MySQL and PostgreSQL?

PKI

Database

KV

Transit

Submit

16. What is AppRole authentication primarily designed for in Vault?

Human user login with MFA

Machine-to-machine authentication for applications and services

LDAP directory integration

OAuth 2.0 federation

17. Which encryption algorithm does Vault use as its default for data encryption at rest?

AES-128

AES-256

RSA-2048

DES

18. True or False: Vault stores all secrets in plain text by default.

True

False

Submit

20. Which authentication method in Vault uses a username and password stored in Vault's internal database?

AppRole

Userpass

LDAP

JWT

AutoOps+ HashiCorp Vault and Secrets Managers Quiz

1. Which policy decision in Vault denies access to a resource?

2.

What first name or nickname would you like us to use?

2. Which Vault feature allows secrets to be automatically revoked after a specified time period?

3. What is the primary purpose of Vault's ____ feature, which restricts access based on IP address or entity metadata?

4. True or False: Vault's KV secret engine versions all stored secrets by default.

5. Which Vault authentication method integrates with OpenID Connect providers like Okta or Auth0?

6. In a Vault cluster, what is the role of a ____ node that receives requests but cannot write to storage?

7. What does Vault's ____ secret engine provide for generating and managing X.509 certificates?

8. Which Vault feature allows you to distribute unseal keys across multiple parties to prevent single points of failure?

9. True or False: Vault can automatically unseal itself after a restart without manual intervention.

10. In Vault, what is a ____ used to control what actions authenticated users can perform?

11. What is the primary function of HashiCorp Vault?

12. What does the Vault ____ engine provide for encryption-as-a-service without storing data?

13. True or False: Vault's audit logging is optional and should be disabled in production for performance.

14. Which Vault secret engine provides integration with external databases like MySQL and PostgreSQL?

15. Vault's ____ feature enables automatic rotation of database credentials on a defined schedule.

16. What is AppRole authentication primarily designed for in Vault?

17. Which encryption algorithm does Vault use as its default for data encryption at rest?

18. True or False: Vault stores all secrets in plain text by default.

19. What does Vault's ____ feature allow you to generate and manage short-lived credentials automatically?

20. Which authentication method in Vault uses a username and password stored in Vault's internal database?