Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

HashiCorp Exam Vault-Associate Topic 2 Question 7 Discussion

Actual exam question for HashiCorp's HashiCorp Certified: Vault Associate (002) exam
Question #: 7
Topic #: 2
[All HashiCorp Certified: Vault Associate (002) Questions]

Which Vault secret engine may be used to build your own internal certificate authority?

Show Suggested Answer Hide Answer
Suggested Answer: B

The Vault secret engine that can be used to build your own internal certificate authority is the PKI secret engine. The PKI secret engine generates dynamic X.509 certificates on-demand, without requiring manual processes of generating private keys and CSRs, submitting to a CA, and waiting for verification and signing. The PKI secret engine can act as a root CA or an intermediate CA, and can issue certificates for various purposes, such as TLS, code signing, email encryption, etc. The PKI secret engine can also manage the certificate lifecycle, such as rotation, revocation, renewal, and CRL generation. The PKI secret engine can also integrate with external CAs, such as Venafi or Entrust, to delegate the certificate issuance and management.Reference:PKI - Secrets Engines | Vault | HashiCorp Developer,Build Your Own Certificate Authority (CA) | Vault - HashiCorp Learn


by Glenna at Dec 09, 2023, 12:20 AM

Limited Time Offer

25%

Off

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Brandon
24 days ago
Hah, I bet the person who wrote this question is just trying to trip us up. They're probably hoping we'll get distracted by all the other shiny secret engine options.
upvoted 0 times
...
Tawny
25 days ago
Ha, true that. Gotta stay focused and not get too fancy. I'm going with B) PKI for this one.
upvoted 0 times
Bettina
7 days ago
Let's go with PKI then. It's a reliable option for sure.
upvoted 0 times
...
Elbert
8 days ago
I would also choose PKI for building an internal certificate authority.
upvoted 0 times
...
Dalene
9 days ago
Yeah, PKI is the most common choice for that purpose. Good call!
upvoted 0 times
...
Jacklyn
10 days ago
PKI is definitely the way to go for building an internal certificate authority.
upvoted 0 times
...
Sarina
11 days ago
I think PKI is the best option too. It's straightforward and secure.
upvoted 0 times
...
Lindsay
12 days ago
I agree, keeping it simple is key. PKI is a solid choice.
upvoted 0 times
...
...
Dick
26 days ago
Yeah, I agree. The PKI engine is the one that allows you to build your own internal certificate authority, right? I remember covering that in the training materials.
upvoted 0 times
...
Vallie
27 days ago
You know, you might be onto something there. Transit does have some certificate management capabilities. But I'm pretty confident the PKI engine is the one specifically designed for that purpose.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77