Absolute Free Vault-Associate Exam Practice for Comprehensive Preparation 

Your organization runs workloads on both AWS and Azure for production applications. The security team has requested that a single Vault authentication mechanism be enabled to support applications on both public cloud platforms. Which of the following would be a valid auth method you can use?  

True or False? When encrypting data with the Transit secrets engine, Vault always stores the ciphertext in a dedicated KV store along with the associated encryption key.

You have a new team member on the Vault operations team. Their first task is to rotate the encryption key in Vault as part of the organization's security policy. However, when they log in, they get an access denied error when attempting to rotate the key. The policy being used is below. Why can't the user rotate the encryption key? path "auth/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "sys/rotate" { capabilities = ["read", "update"] }

When Vault is sealed, which are the only two operations available to a Vault administrator? (Select two) 

After issuing the command to delete a secret, you run a vault kv list command, but the path to the secret still seems to exist. What command would permanently delete the path from Vault?