VAULT-ASSOCIATE-002 · Question #51
Unsealing a single Vault server in a cluster unseals all Vault servers in that cluster.
The correct answer is B. False. In a Vault cluster, each server must be unsealed individually by providing its own unseal keys or through auto-unseal mechanisms; unsealing one server does not unseal others.
Question
Options
- ATrue
- BFalse
How the community answered
(35 responses)- A6% (2)
- B94% (33)
Why each option
In a Vault cluster, each server must be unsealed individually by providing its own unseal keys or through auto-unseal mechanisms; unsealing one server does not unseal others.
Unsealing one Vault server in a cluster does not automatically unseal the other servers; each server requires its own unseal operation.
In a Vault cluster, each individual Vault server maintains its own master key and must be unsealed independently, either manually with unseal keys or automatically via an auto-unseal mechanism, to decrypt its portion of the data. Unsealing one node does not automatically unseal others.
Concept tested: Vault cluster unsealing
Source: https://developer.hashicorp.com/vault/docs/concepts/seal#unseal
Topics
Community Discussion
No community discussion yet for this question.