VAULT-ASSOCIATE-002 · Question #56
What is not a function provided by Vault's transit secret engine?
The correct answer is C. Storing ciphertext data. The Vault Transit secrets engine provides cryptographic functions like encryption, decryption, signing, and random byte generation, but it does not store the resulting ciphertext data.
Question
Options
- AGenerating random bytes
- BEncrypting data
- CStoring ciphertext data
- DVerifying signed data
- ENone of the above
How the community answered
(24 responses)- A4% (1)
- C96% (23)
Why each option
The Vault Transit secrets engine provides cryptographic functions like encryption, decryption, signing, and random byte generation, but it does not store the resulting ciphertext data.
The Transit engine can generate random bytes, which is a supported cryptographic function.
Encrypting data is a primary function of the Transit engine, allowing applications to send plaintext and receive ciphertext.
The Transit secrets engine performs cryptographic operations such as encryption and decryption, but it specifically does not store the ciphertext data. The user or application is responsible for storing the encrypted data outside of Vault.
The Transit engine supports signing data and verifying those signatures, which is another core cryptographic capability.
Since storing ciphertext data is not a function of the Transit engine, 'None of the above' is incorrect.
Concept tested: Vault Transit engine capabilities
Source: https://developer.hashicorp.com/vault/docs/secrets/transit
Topics
Community Discussion
No community discussion yet for this question.