nerdexam
HashiCorp

VAULT-ASSOCIATE-002 · Question #77

Where on the page would you click to display the list of available Vault-created encryption keys?

The correct answer is C. transit/. To view a list of Vault-created encryption keys, an operator would navigate to the transit/ secrets engine, which specializes in cryptographic operations and key management.

Submitted by rachelw· Apr 18, 2026Understand Vault Concepts

Question

Where on the page would you click to display the list of available Vault-created encryption keys?

Exhibit

VAULT-ASSOCIATE-002 question #77 exhibit

Options

  • ACubbyhole/
  • Bsecret/
  • Ctransit/

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    94% (49)

Why each option

To view a list of Vault-created encryption keys, an operator would navigate to the `transit/` secrets engine, which specializes in cryptographic operations and key management.

ACubbyhole/

The `cubbyhole/` path refers to a token's private, per-token secret storage, not a global list of Vault-created encryption keys.

Bsecret/

The `secret/` path typically refers to the Key-Value (KV) secrets engine, which stores arbitrary secrets like passwords and API keys, but does not primarily manage or list cryptographic encryption keys created by Vault for other services.

Ctransit/Correct

The `transit/` secrets engine (also known as "cryptography as a service") is specifically designed for generating, encrypting, and decrypting data using keys managed by Vault. This engine provides access to the list of available Vault-created encryption keys for various cryptographic operations.

Concept tested: Vault Transit secrets engine for encryption keys

Source: https://developer.hashicorp.com/vault/docs/secrets/transit

Topics

#Transit Secret Engine#Encryption Keys#Secret Engine Paths#Vault UI

Community Discussion

No community discussion yet for this question.

Full VAULT-ASSOCIATE-002 Practice