The secrets engine is enabled at secret/. See the following policy: key/value v2 Which of the following operations are permitted by this policy? (Choose two.)

The `vault kv get secret/webapp1` command performs a read operation on `secret/webapp1`, which is explicitly permitted by the policy's `read` capability for that path.

The `vault kv put secret/webapp1` command performs an update (write) operation on `secret/webapp1`, which is explicitly permitted by the policy's `update` capability for that path.

The `vault kv metadata get secret/webapp1` command would require `read` capability on `secret/metadata/webapp1` or specific `read` access to the metadata path, which is not granted by the policy focused on `secret/webapp1`'s data.

The policy only grants access to `secret/webapp1`, not `secret/super-secret`, and also does not grant `delete` capability.

The policy only grants access to `secret/webapp1`, not `secret/super-secret`, and does not grant `list` capability, which applies to the parent path.