HashiCorp Vault: Secrets Management Fundamentals
HashiCorp Vault: Secrets Management Fundamentals
Up to 20 questions, shuffled on every run
Welcome to the HashiCorp Vault Basics Quiz! In modern DevOps, security cannot be an afterthought. Vault provides the “Source of Truth” for secrets, certificates, and encryption. This quiz will test your understanding of how Vault keeps data safe, how to handle the unseal process, and how dynamic secrets work. Good luck!
Answer key and explanations20 questions
The quiz above draws 20 questions at random from these 30, so a second attempt will not be the same run. Everything in the pool is listed here.
What is the primary purpose of HashiCorp Vault?
AnswerTo securely manage access to secrets and sensitive data
What state is Vault in when it is first started but cannot yet access its data?
AnswerThe Sealed state
What is a "Dynamic Secret" in HashiCorp Vault?
AnswerA credential generated on-demand with a limited lease
What does the "Unseal" process involve?
AnswerProviding a threshold of shards to rebuild the key
Which secret engine is used for simple Key/Value storage?
AnswerThe KV Secret Engine
What is "Encryption as a Service" (Transit Engine)?
AnswerUsing Vault to encrypt data without storing the results
What is a Vault "Token"?
AnswerThe primary mechanism for authenticating API requests
What is a "Lease" in Vault?
AnswerMetadata defining the validity period of a given secret
How are permissions managed in Vault?
AnswerUsing Policies written in HashiCorp Configuration (HCL)
What is the "Auth Method" for Kubernetes?
AnswerUsing Kubernetes Service Account tokens to login to Vault
What is the "Master Key" used for?
AnswerTo decrypt the internal barrier and data during startup
What is the "PKI" Secret Engine?
AnswerA system to generate X.509 certificates on-demand
Which command initializes a brand-new Vault server?
Answer`vault operator init` (Initialize server)
What happens when a Vault token expires?
AnswerThe token and its associated access are revoked
What is "Auto-unseal" in HashiCorp Vault?
AnswerUsing a cloud KMS to automatically decrypt the key
What is a "Root Token" in Vault?
AnswerA privileged token used for initial system configuration
What does "Vault Audit Logging" provide?
AnswerA record of every request and response sent to Vault
What is "Response Wrapping" in Vault?
AnswerA method to deliver secrets via a one-time-use token
What is the "AppRole" Auth Method?
AnswerA method for machine authentication using Role and Secret IDs
In Vault, what is the "Barrier"?
AnswerThe layer that encrypts all data leaving the server
Which Vault engine provides temporary database credentials?
AnswerThe Database Secret Engine (Dynamic)
What is "Sentinel" in the context of Vault?
AnswerA policy-as-code framework for complex logic
What is a Vault "Mount Point"?
AnswerThe logical path where an engine or method is enabled
What is the purpose of "Vault Agent"?
AnswerA client-side daemon for token and secret management
What is "Entropy Augmentation"?
AnswerUsing external randomness to improve security
Which command shows the current status of a Vault server?
Answer`vault status` (Seal status)
What is "Control Groups" in Vault?
AnswerA feature requiring multi-user approval for requests
What is "KV Version 2" (v2)?
AnswerA KV engine that supports versioning and soft-deletes
What is "Batch Tokens" in Vault?
AnswerLightweight tokens designed for high-throughput tasks
What is "Rekeying" in HashiCorp Vault?
AnswerThe process of generating a new master key and shards
