HashiCorp Certified - Vault Associate Course - Pros and Cons of Unseal Options

The video tutorial discusses three unseal options for Vault: key shards, auto unseal, and transit. Key shards are simple and flexible but pose risks due to human error. Auto unseal offers automation and integration benefits but may lead to cloud vendor lock-in. Transit auto unseal is platform agnostic and useful for multiple clusters but requires a centralized vault cluster. Each option has its pros and cons, and the choice depends on organizational needs.

Which unseal option is described as being platform agnostic and useful for multiple vault clusters?

• Key Shards

• Auto Unseal

• Transit

• Manual Unseal

What is a benefit of using auto unseal for large organizations?

• Set and forget functionality

• Increased human error

• Requires manual intervention

• Complex configuration

What is a major risk associated with using key shards for unsealing?

• Complex setup

• Vendor lock-in

• High cost

• Human error

What is a potential downside of using auto unseal in terms of cloud integration?

• Increased human error

• Limited flexibility

• Requires manual intervention

• Cloud vendor lock-in

Why might an organization be hesitant to use transit auto unseal?

• It is too simple

• It lacks integration benefits

• It is not platform agnostic

• It requires a centralized vault cluster