VAULT-ASSOCIATE-002 · Question #17
Examine the command below. Output has been trimmed. Which of the following statements describe the command and its output?
The correct answer is D. Configures the AppRole auth method with user specified role ID and secret ID. The command shown (vault write auth/approle/role/test-role role_id="xxxx" secret_id="yyyy") is used to write configuration data to a specific AppRole, likely setting or updating its role_id and secret_id.
Question
Exhibit
Options
- AMissing a default token policy
- BGenerated token's TTL is 60 hours
- CGenerated token is an orphan token which can be renewed indefinitely
- DConfigures the AppRole auth method with user specified role ID and secret ID
How the community answered
(42 responses)- A7% (3)
- B2% (1)
- C2% (1)
- D88% (37)
Why each option
The command shown (`vault write auth/approle/role/test-role role_id="xxxx" secret_id="yyyy"`) is used to write configuration data to a specific AppRole, likely setting or updating its `role_id` and `secret_id`.
The command shown is configuring an AppRole, not related to missing default token policies directly.
The command itself does not output token TTLs; it's configuring an AppRole. Token creation and TTLs are a subsequent step using the AppRole.
The command is for configuring an AppRole, not generating a token or setting its orphan status or renewability.
The `vault write auth/approle/role/test-role` command is used to configure an AppRole named `test-role` within the AppRole authentication method. The arguments `role_id` and `secret_id` indicate that it's setting or updating these specific parameters for the role, which are used for application authentication.
Concept tested: Vault AppRole configuration
Source: https://developer.hashicorp.com/vault/docs/auth/approle#configuration
Topics
Community Discussion
No community discussion yet for this question.