VAULT-ASSOCIATE-002 · Question #26
Which of the following statements describe the secrets engine in Vault? (Choose three.)
The correct answer is A. Some secrets engines simply store and read data C. You can build your own custom secrets engine D. Each secrets engine is isolated to its path. Vault's secrets engines are modular components that provide diverse functionalities, from simple key-value storage to dynamic secret generation, are isolated by their mount paths, and can be customized.
Question
Options
- ASome secrets engines simply store and read data
- BOnce enabled, you cannot disable the secrets engine
- CYou can build your own custom secrets engine
- DEach secrets engine is isolated to its path
- EA secrets engine cannot be enabled at multiple paths
How the community answered
(30 responses)- A87% (26)
- B7% (2)
- E7% (2)
Why each option
Vault's secrets engines are modular components that provide diverse functionalities, from simple key-value storage to dynamic secret generation, are isolated by their mount paths, and can be customized.
Secrets engines like the Key/Value (KV) secrets engine are designed primarily for storing and retrieving arbitrary secrets, functioning much like a secure key-value store.
Secrets engines can be disabled using the `vault secrets disable` command, which removes the engine and all its associated data.
Vault provides a plugin interface that allows users to develop and integrate their own custom secrets engines, extending Vault's capabilities beyond the built-in types.
Each secrets engine is mounted at a specific path (e.g., `secret/`, `aws/`), and its operations are confined to that path, providing logical isolation and allowing for distinct configurations and policies.
Many secrets engines, particularly the KV secrets engine, can be enabled multiple times at different paths, with each instance having its own isolated data and configuration.
Concept tested: Vault secrets engine characteristics and flexibility
Source: https://developer.hashicorp.com/vault/docs/concepts/secrets-engines
Topics
Community Discussion
No community discussion yet for this question.