Free Preparation Discussions
MENU
HashiCorp Exam HCVA0-003 Topic 4 Question 4 Discussion
Topic #: 4
Your organization has an initiative to reduce and ultimately remove the use of long lived X.509 certificates. Which secrets engine will best support this use case?
The PKI secrets engine is designed to support the use case of reducing and ultimately removing the use of long lived X.509 certificates. The PKI secrets engine can generate dynamic X.509 certificates on demand, with short time-to-live (TTL) and automatic revocation. This eliminates the need for manual processes of generating, signing, and rotating certificates, and reduces the risk of certificate compromise or misuse. The PKI secrets engine can also act as a certificate authority (CA) or an intermediate CA, and can integrate with external CAs or CRLs. The PKI secrets engine can issue certificates for various purposes, such as TLS, SSH, code signing, email encryption, etc. Reference: https://developer.hashicorp.com/vault/docs/secrets/pki1, https://developer.hashicorp.com/vault/tutorials/getting-started/getting-started-dynamic-secrets
Gregoria
1 months agoDiego
1 months agoYuette
2 days agoFletcher
5 days agoNelida
9 days agoBarney
14 days agoMiss
1 months agoDominga
4 days agoVerdell
15 days agoVincenza
1 months agoJerry
2 months agoElly
2 months agoDarci
2 months agoCheryl
1 months agoLashawnda
1 months agoJade
2 months agoLea
13 days agoWilda
14 days agoKatina
16 days agoJoni
20 days agoDusti
21 days agoCarlton
1 months agoAleisha
1 months agoDick
2 months agoJerry
3 months ago