VAULT-ASSOCIATE-002 · Question #85
Where can you set the Vault seal configuration? (Choose two.)
The correct answer is C. Vault configuration file D. Environment variables. Vault seal configuration can be primarily defined within the Vault configuration file or by setting specific environment variables before starting Vault.
Question
Options
- ACloud Provider KMS
- BVault CLI
- CVault configuration file
- DEnvironment variables
- EVault API
How the community answered
(19 responses)- A5% (1)
- C95% (18)
Why each option
Vault seal configuration can be primarily defined within the Vault configuration file or by setting specific environment variables before starting Vault.
Cloud Provider KMS (Key Management Service) is a *type* of seal that Vault can use, but it's not where you *set* the configuration itself; the configuration tells Vault *which* KMS to use.
The Vault CLI is used for interacting with an *already running* Vault instance and cannot be used to configure its seal method at startup.
The Vault configuration file (`vault.hcl`) is the primary method for defining backend storage, listeners, and seal configurations, specified in the `seal` stanza.
Certain seal-related parameters, such as Cloud KMS keys, can be set via environment variables (e.g., `VAULT_AWSKMS_KEY_ID`) to dynamically configure the seal at startup.
The Vault API interacts with an *already running* Vault instance and cannot be used to configure its seal method at startup.
Concept tested: Vault seal configuration methods
Source: https://developer.hashicorp.com/vault/docs/concepts/seal#seal-configuration
Topics
Community Discussion
No community discussion yet for this question.