HashiCorp Certified - Vault Associate Course - Lab—Key/Value (KV) Version 2 Secrets Engine

The video tutorial covers the key value (KV) version 2 secrets engine in Vault. It explains how to upgrade from KV version 1 to version 2, enable a new KV version 2, and manage data with versioning. The tutorial also discusses deleting, undeleting, and permanently destroying data, as well as working with metadata and custom metadata. Additionally, it provides guidance on creating policies and using the API to interact with KV version 2.

What command is used to enable versioning on an existing KV version 1 secrets engine?

• vault KV upgrade

• vault secrets upgrade

• vault KV enable-versioning

• vault secrets enable-versioning

When creating a new KV Version 2 secrets engine, which of the following is a valid way to specify the version?

• version=2

• KV-2

• KV-V2

• version:2

In KV Version 2, what prefix is automatically added to the path when writing data?

• meta

• info

• data

• secret

What happens when you delete data in KV Version 2?

• Only the data is removed, metadata remains.

• Both data and metadata are archived.

• The data and metadata are both permanently removed.

• The data is archived, but not removed.

How can you permanently remove all versions and metadata of a secret in KV Version 2?

• vault KV remove

• vault KV metadata delete

• vault KV purge

• vault KV delete

What is the purpose of custom metadata in KV Version 2?

• To store additional secret data

• To provide extra information about the secret

• To encrypt the secret

• To backup the secret

Which command is used to view metadata of a secret in KV Version 2?

• vault KV metadata get

• vault KV metadata view

• vault KV metadata show

• vault KV metadata list

What must be included in a policy for accessing KV Version 2 data?

• The metadata prefix

• The data prefix

• The secret key

• The version number

What is the effect of setting a maximum number of versions for a secret in KV Version 2?

• It deletes older versions beyond the set limit.

• It encrypts older versions.

• It backs up older versions.

• It archives older versions.

When using the API to access KV Version 2, what must be included in the path?

• The metadata prefix

• The secret key

• The data prefix

• The version number