Which Vault storage backend is recommended for new HA deployments?
Vaultpro Architecture Category
Question · Easy
Which Vault auto-unseal mechanism uses AWS KMS?
Question · Medium
Which Vault policy capability allows listing keys under a path?
Vaultpro Policies Category
Tech Exam Prep Podcast
Listen on Spotify
Podcast
What is the syntax for a Vault ACL policy capability list?
Which Vault authentication method uses a RoleID and SecretID?
Vaultpro Auth Category
Which secrets engine generates database credentials on demand with short TTLs?
Vaultpro Secrets Category
Which is the primary purpose of the Transit secrets engine?
Which is the correct Vault CLI command to check Vault's seal status?
Vaultpro Operations Category
Which token type has no parent and is not revoked when its creator token is revoked?
Question · Hard
What is the difference between service tokens and batch tokens?
Which Vault feature enables multi-tenancy with isolated secrets and policies (Enterprise)?
Vaultpro Enterprise Category
Which is the best practice for production Vault clusters?
Which is a key differentiator of KV v2 over KV v1?
Which file configures Vault audit logging to a local file?
Vaultpro Audit Category
Which PKI role configuration restricts which domains a certificate can be issued for?
Which Vault component monitors the Raft cluster and removes failed nodes automatically?
Which command takes a snapshot of the Raft state for backup?
Which Vault Enterprise replication mode scales reads across regions?
Which metric indicates Vault Raft write performance?
Vaultpro Monitoring Category
Which Vault feature allows workloads in Kubernetes to authenticate using their service account JWT?
Which Vault Agent feature keeps a file updated with a rendered template using secret data?
Vaultpro Agent Category
Which Prometheus metric endpoint does Vault expose?
Which command rotates the Vault root token?
What is the recommended behavior for Vault in production?
Vaultpro Security Category
Which auth method supports single sign-on with an OIDC provider like Okta, Auth0, or Keycloak?
Which command lists all enabled secrets engines?
Which Vault feature provides format-preserving encryption and tokenization (Enterprise)?
Which authentication method accepts a TLS client certificate?
Which is the key advantage of Vault Agent over direct SDK usage?
Which Vault Raft configuration parameter controls the HA replication network?
Which response-wrapping feature prevents a secret from being exposed to an intermediate party?
Which Vault storage backend is deprecated for new deployments?
Which Vault CLI command reveals cluster leader information?
Which is a Vault Enterprise policy type that can constrain authn-time attributes (e.g., deny logins after business hours)?
Which Vault CLI command revokes all tokens for a specific auth method?
Which component in a secrets engine's mount tuning controls default lease durations?
Which is the role of the transit secrets engine key rotation?
Which upgrade approach is recommended for a 3-node Vault Raft cluster?
Which Vault feature hashes sensitive fields in audit log output?
Which configuration stanza defines a Vault listener?
Which command initializes a Vault server?
Which Vault feature provides dynamic SSH certificate-based authentication?
Which is a common cause of Vault performance degradation under high load?
Which Vault auth method validates AWS EC2 instance identity documents?
Which capability denies a request regardless of other policy grants?
Which Vault subcommand seals the Vault?
Which namespace operation is correct in Vault Enterprise?
Loading more…