Free Preparation Discussions
MENU
HashiCorp Exam HCVA0-003 Topic 7 Question 2 Discussion
Topic #: 7
As a best practice, the root token should be stored in which of the following ways?
The root token is the initial token created when initializing Vault. It has unlimited privileges and can perform any operation in Vault. As a best practice, the root token should be revoked and never stored after initial setup. This is because the root token is a single point of failure and a potential security risk if it is compromised or leaked. Instead of using the root token, Vault operators should create other tokens with appropriate policies and roles that allow them to perform their tasks. If a new root token is needed in an emergency, the vault operator generate-root command can be used to create one on-the-fly with the consent of a quorum of unseal key holders. Reference: Tokens | Vault | HashiCorp Developer, Generate root tokens using unseal keys | Vault | HashiCorp Developer
Annamaria
28 days agoDorethea
30 days agoTerina
9 days agoLashawnda
12 days agoDaren
13 days agoTamesha
1 months agoMichel
3 days agoJamie
5 days agoBillye
2 months agoOrville
1 months agoMelvin
1 months agoArmanda
1 months agoDwight
2 months agoCarrol
2 months agoSang
2 months agoAnthony
2 months agoBlair
17 days agoLawana
18 days agoLashawnda
24 days agoJoesph
27 days agoNadine
1 months agoLuz
1 months agoDorinda
2 months agoBrittni
2 months ago