VAULT-ASSOCIATE-002 · Question #27
What is a benefit of response wrapping?
The correct answer is D. Ensure that only a single party can ever unwrap the token and see what's inside. Response wrapping enhances security by delivering a secret inside a one-time-use token, ensuring that only the intended recipient can reveal its contents and providing an audit trail.
Question
Options
- ALog every use of a secret
- BLoad balance secret generation across a Vault cluster
- CProvide error recovery to a secret so it is not corrupted in transit
- DEnsure that only a single party can ever unwrap the token and see what's inside
How the community answered
(57 responses)- A7% (4)
- B4% (2)
- C2% (1)
- D88% (50)
Why each option
Response wrapping enhances security by delivering a secret inside a one-time-use token, ensuring that only the intended recipient can reveal its contents and providing an audit trail.
While Vault has auditing capabilities, response wrapping itself is not designed for logging *every* use of a secret; rather, it secures the *delivery* of a secret.
Response wrapping is a security feature for secret delivery, not a mechanism for load balancing secret generation across a Vault cluster.
Response wrapping protects the secret during transit by obscuring its contents, but it does not provide error recovery or prevent corruption of the secret itself.
Response wrapping encloses a Vault response (which contains sensitive data like a secret or token) within a single-use, time-limited token. This wrapped token can then be safely passed through insecure channels, and only the client possessing the wrapped token can unwrap it once to reveal the sensitive contents, effectively ensuring a "single party" access.
Concept tested: Vault response wrapping security benefits
Source: https://developer.hashicorp.com/vault/docs/concepts/response-wrapping
Topics
Community Discussion
No community discussion yet for this question.