VAULT-ASSOCIATE-002 · Question #77
Where on the page would you click to display the list of available Vault-created encryption keys?
The correct answer is C. transit/. To view a list of Vault-created encryption keys, an operator would navigate to the transit/ secrets engine, which specializes in cryptographic operations and key management.
Question
Exhibit
Options
- ACubbyhole/
- Bsecret/
- Ctransit/
How the community answered
(52 responses)- A4% (2)
- B2% (1)
- C94% (49)
Why each option
To view a list of Vault-created encryption keys, an operator would navigate to the `transit/` secrets engine, which specializes in cryptographic operations and key management.
The `cubbyhole/` path refers to a token's private, per-token secret storage, not a global list of Vault-created encryption keys.
The `secret/` path typically refers to the Key-Value (KV) secrets engine, which stores arbitrary secrets like passwords and API keys, but does not primarily manage or list cryptographic encryption keys created by Vault for other services.
The `transit/` secrets engine (also known as "cryptography as a service") is specifically designed for generating, encrypting, and decrypting data using keys managed by Vault. This engine provides access to the list of available Vault-created encryption keys for various cryptographic operations.
Concept tested: Vault Transit secrets engine for encryption keys
Source: https://developer.hashicorp.com/vault/docs/secrets/transit
Topics
Community Discussion
No community discussion yet for this question.
