Hashicorp Discussions

Exam Vault Associate 002 All Questions

View all questions & answers for the Vault Associate 002 exam

Go to Exam

Exam Vault Associate 002 topic 1 question 59 discussion

Actual exam question from HashiCorp's Vault Associate 002

Question #: 59
Topic #: 1

[All Vault Associate 002 Questions]

The ‘alpha’ secrets are stored in the team-based paths using this convention: secret/<team_name>/alpha. For example, secret/team01/alpha and /secrets/team02/alpha.
Which Vault policy would not allow reading paths with the word “beta” in them, such as secrets/team01/beta?

A.
B.
C.
D. None of the above

Show Suggested Answer

Suggested Answer: B 🗳️

by daz_rekka at Jan. 22, 2024, 9:10 p.m.

Comments

Submit Cancel

gvyecvlc

7 months, 3 weeks ago

D. Additional deny pattern to be set for beta

upvoted 2 times

...

Mark1000

9 months, 3 weeks ago

C A would allow secrets/team01/beta and B /secrets/team01/beta/alpha

upvoted 2 times

...

daz_rekka

10 months ago

Selected Answer: C

A would allow "secrets/beta" and B would allow "secrets/beta/alpha" so C seems correct.

upvoted 2 times

...