Vault CLI determines which Vault servers to send requests using the VAULT_ADDR environment variable. What is the default value used if you don't set the address?
The latest changes and updates from the administration for this exam.
Latest Update: May 18 2026
All questions are working fine.
Vault CLI determines which Vault servers to send requests using the VAULT_ADDR environment variable. What is the default value used if you don't set the address?
True or False? Although AppRole is designed for machines, humans can use it to authenticate to Vault if you wish.
True or False? You can create and update Vault policies using the UI.
Which of the following features in Vault will replicate service tokens between clusters?
Industrial Robot Corp is running applications active/active in multiple data centers for high availability. Vault has been selected as the secrets management tool for tight integration with its applications. What Vault feature should be used in the secondary data center to ensure applications have local access to secrets?
You have ciphertext stored in an Amazon S3 bucket that contains customer data encrypted by the key named prod-customer.
vault:v4:Xa1f9FIJtn13em/Wb7QCsXsU/kCOn7...
When you look up the properties of the key, the following output is shown:
Will Vault decrypt this data for you by running the following command?
You are enabling a secrets engine in Vault using the CLI. What subcommands are available when using the vault secrets command? (select four)
Select all that apply
What type of secrets engine is mounted at creds/?
Tom needs to set the proper environment variable so he doesn't need to first authenticate to Vault to retrieve dynamically generated credentials for a database server. What environment variable does Tom need to set first before running commands?
In Vault, there are two main types of tokens, batch and service. Which of the following is true about the renewable capabilities of each?