A Fintech company is using Vault to store its static long-lived credentials so automated processes can quickly retrieve secrets. A user needs to add a new static secret for a new automated job. What CLI commands can be used to store a new static credential? (Select two)
A. vault kv put kv/training/certification/vault @secrets.txt
B. vault kv put -mount=secret creds passcode=my-long-passcode
C. vault kv write kv/training/certification/vault key=username value=bryan
D. vault kv create kv/training/certification/vault @secrets.txt
正解:A,B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Vault operators can create two types of groups in Vault. What are the two types?
A. Policy groups
B. External groups
C. Internal groups
D. Security groups
正解:B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
You want to generate a token with a TTL of 24 hours which can be renewed indefinitely.
Which flag would you use on the following command?
vault token create
A. -explicit-max-ttl=0
B. -period=24h
C. -orphan
D. -ttl=24h
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
An application has authenticated to Vault and has obtained dynamic database credentials with a lease of 4 hours. Four hours later, the credentials expire, and the application can no longer communicate with the backend database, so the application goes down. What should the developers instruct the application to do to prevent this from happening again while maintaining the same level of security?
A. Use a different auth method
B. Go back to using static credentials
C. Revoke the lease before expiration
D. Renew the lease before expiration
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Frapps, Inc. is a coffee startup specializing in frozen caffeinated beverages. Their new customer loyalty web app uses Vault to store sensitive information, choosing Integrated Storage for its benefits. Select the benefits the organization would see by using Integrated Storage over other storage backends (Select four)
A. Immediate access to storage since the data is stored locally on disk
B. Eliminates the requirement to deploy and manage a separate platform for storing encrypted data
C. Simplified troubleshooting since Integrated Storage is a built-in solution
D. Reduces operational overhead since all configuration is within Vault itself
E. Eliminates network communication between hosts, requiring no open ports between hosts
F. Uses the SERF gossip protocol to enable communication between cluster nodes
正解:A,B,C,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
After creating a dynamic credential on a database, the DBA accidentally deletes the credentials on the database itself. When attempting to remove the lease, Vault returns an error stating that the credential cannot be found. What command can be run to make Vault remove the secret?
A. vault lease revoke -enforce
B. vault lease revoke -force -prefix < lease_path >
C. vault revoke -apply
D. vault lease -renew
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
1255 お客様のコメント





Sasai -
二週間で合格できました、頼れる問題集です。
模擬試験の内容が本番も同じようでしたので、落ち着いて解くことができました。
Pass4Testさんありがとうございました。