Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location PL
Mob_nav_barsMENU

HashiCorp Exam Vault-Associate Topic 3 Question 21 Discussion

Actual exam question for HashiCorp's Vault-Associate exam
Question #: 21
Topic #: 3
[All Vault-Associate Questions]

Which Vault secret engine may be used to build your own internal certificate authority?

Show Suggested Answer Hide Answer
Suggested Answer: B

The Vault secret engine that can be used to build your own internal certificate authority is the PKI secret engine. The PKI secret engine generates dynamic X.509 certificates on-demand, without requiring manual processes of generating private keys and CSRs, submitting to a CA, and waiting for verification and signing. The PKI secret engine can act as a root CA or an intermediate CA, and can issue certificates for various purposes, such as TLS, code signing, email encryption, etc. The PKI secret engine can also manage the certificate lifecycle, such as rotation, revocation, renewal, and CRL generation. The PKI secret engine can also integrate with external CAs, such as Venafi or Entrust, to delegate the certificate issuance and management.Reference:PKI - Secrets Engines | Vault | HashiCorp Developer,Build Your Own Certificate Authority (CA) | Vault - HashiCorp Learn


by Murray at Jul 11, 2024, 06:39 PM

Limited Time Offer

25%

Off

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Loise
4 months ago
I believe the correct answer is B) PKI because it is commonly used for managing certificates.
upvoted 0 times
...
Queen
5 months ago
I'm not sure, but I think Transit could also be used for this purpose.
upvoted 0 times
...
Lucina
5 months ago
The PKI engine is where it's at! Building your own internal CA is like having a superpower. Just don't use it to take over the world, okay?
upvoted 0 times
Ben
3 months ago
Just make sure you use it responsibly and don't abuse your authority.
upvoted 0 times
...
Lynelle
3 months ago
I agree, having that power to issue certificates is pretty cool.
upvoted 0 times
...
Catarina
3 months ago
PKI engine is definitely the way to go for building your own internal CA.
upvoted 0 times
...
Karima
4 months ago
Just make sure you use it responsibly and don't abuse your authority.
upvoted 0 times
...
Idella
4 months ago
I agree, having that power to issue certificates is pretty cool.
upvoted 0 times
...
Keneth
4 months ago
PKI engine is definitely the way to go for building your own internal CA.
upvoted 0 times
...
...
Samira
5 months ago
Hmm, I'm not sure about this one. Do I really want to deal with the hassle of managing my own CA? Maybe I'll just stick with the Transit engine and let Vault handle the encryption for me.
upvoted 0 times
...
Roselle
5 months ago
I'm feeling pretty confident about this one. The PKI engine is the clear choice for setting up an internal certificate authority. It's like having your own personal stamp of approval.
upvoted 0 times
Thomasena
4 months ago
Yeah, it's a great choice for managing your own certificates and keys securely.
upvoted 0 times
...
Kanisha
4 months ago
I agree, the PKI engine is definitely the way to go for setting up an internal certificate authority.
upvoted 0 times
...
...
Nickolas
5 months ago
The PKI secret engine is definitely the way to go. I mean, who doesn't love building their own internal CA? It's like having your own little certificate kingdom.
upvoted 0 times
Beula
4 months ago
Definitely, PKI is the most popular choice for internal CAs.
upvoted 0 times
...
Kathrine
4 months ago
Transit and Generic engines are good too, but PKI is the way to go.
upvoted 0 times
...
Theresia
4 months ago
I agree, having your own certificate kingdom is pretty cool.
upvoted 0 times
...
Royal
5 months ago
PKI secret engine is the best for building your own internal CA.
upvoted 0 times
...
...
Paz
5 months ago
I agree with Felix, PKI makes sense for building a certificate authority.
upvoted 0 times
...
Felix
5 months ago
I think the answer is B) PKI.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77