HashiCorp Certified - Vault Associate Course - Vault Policies—Capabilities

HashiCorp Certified - Vault Associate Course - Vault Policies—Capabilities

Assessment

Interactive Video

Information Technology (IT), Architecture

University

Hard

Created by

Quizizz Content

FREE Resource

The video tutorial explains how to define paths and capabilities in Vault policies, focusing on the differences between create and update capabilities. It provides examples of policies for generating database credentials and managing access to specific paths. The tutorial also covers the importance of list privileges for accessing paths in the UI and CLI.

Read more

10 questions

Show all answers

1.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the primary function of the 'deny' capability in Vault policies?

To allow all actions on a path

To enable root access

To override all other capabilities and disallow access

To provide read-only access

2.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

When is the 'create' capability required in Vault?

When updating an existing key

When listing keys

When writing a new key-value pair

When deleting a key

3.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which capability allows you to view the keys at a particular path without reading their values?

List

Update

Read

Create

4.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the correct capability to use when you want to overwrite an existing value in Vault?

Create

Read

Update

Delete

5.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

In the context of Vault, what does the 'sudo' capability allow?

Reading of all secrets

Listing of all paths

Creation of new paths

Access to root-protected paths

6.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What capability is not valid in Vault policies?

Read

Write

Update

Create

7.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

How would you structure a policy to allow read access to all paths under 'web app' except 'super secret'?

Allow read access to 'web app' only

Deny all access to 'web app'

Allow read access to 'super secret' and deny 'web app'

Allow read access to 'web app' and deny 'super secret'

Create a free account and access millions of resources

Create resources
Host any resource
Get auto-graded reports
or continue with
Microsoft
Apple
Others
By signing up, you agree to our Terms of Service & Privacy Policy
Already have an account?