VAULT-ASSOCIATE-002 · Question #49
Which of the following statements are true about the default policy? (Choose two.)
The correct answer is A. It is one of the built-in policies B. Provides a common set of permissions and is included on all tokens by default. The 'default' policy is a built-in Vault policy automatically included with all tokens, providing a common baseline of permissions.
Question
Options
- AIt is one of the built-in policies
- BProvides a common set of permissions and is included on all tokens by default
- CCan not be modified or deleted
- DGives a super admin permissions, similar to a root user on a Linux machine
- EVault upgrade will overwrite any update you made to the policy
How the community answered
(38 responses)- A87% (33)
- C8% (3)
- D3% (1)
- E3% (1)
Why each option
The 'default' policy is a built-in Vault policy automatically included with all tokens, providing a common baseline of permissions.
The `default` policy is one of Vault's fundamental built-in policies that exists in every Vault installation.
All newly created tokens, unless explicitly specified otherwise, are automatically associated with the `default` policy, which grants a baseline set of common permissions.
The `default` policy can be modified, though it's generally not recommended, and it can also be deleted.
The `default` policy does not provide super-admin permissions; it typically grants only basic, safe permissions like reading help and status endpoints.
Vault upgrades do not overwrite custom modifications to the `default` policy, though modifying it is generally discouraged.
Concept tested: Vault default policy characteristics
Source: https://developer.hashicorp.com/vault/docs/concepts/policies#built-in-policies
Topics
Community Discussion
No community discussion yet for this question.