HashiCorp Exam Vault-Associate Topic 9 Question 30 Discussion

Actual exam question for HashiCorp's Vault-Associate exam

Question #: 30
Topic #: 9

[All Vault-Associate Questions]

Which of the following describes usage of an identity group?

ALimit the policies that would otherwise apply to an entity in the group

BWhen they want to revoke the credentials for a whole set of entities simultaneously

CAudit token usage

DConsistently apply the same set of policies to a collection of entities

Show Suggested Answer

Suggested Answer: D

An identity group is a collection of entities that share some common attributes. An identity group can have one or more policies attached to it, which are inherited by all the members of the group. An identity group can also have subgroups, which can further refine the policies and attributes for a subset of entities.

One of the use cases of an identity group is to consistently apply the same set of policies to a collection of entities. For example, an organization may have different teams or departments, such as engineering, sales, or marketing. Each team may have its own identity group, with policies that grant access to the secrets and resources that are relevant to their work. By creating an identity group for each team, the organization can ensure that the entities belonging to each team have the same level of access and permissions, regardless of which authentication method they use to log in to Vault.Reference:Identity: entities and groups | Vault | HashiCorp Developer,vault_identity_group | Resources | hashicorp/vault | Terraform | Terraform Registry

by Shanda at Sep 13, 2024, 11:40 AM

Limited Time Offer

25%

Off

Get Premium Vault-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Curtis

2 months ago

I'm going with D. Consistently applying policies to a group is the bread and butter of identity management.

upvoted 0 times

Benedict

23 days ago

User 3: D is definitely the best choice. Consistency is key in identity management.

upvoted 0 times

...

Rosenda

1 months ago

User 2: Yeah, D makes the most sense. It's important to have the same policies for a group.

upvoted 0 times

...

Carlene

1 months ago

User 1: I agree, D is the way to go. It's all about consistency.

upvoted 0 times

...

Elfrieda

2 months ago

Haha, I'm just hoping the exam doesn't have any trick questions like 'all of the above' as the right answer. That would really throw me for a loop!

upvoted 0 times

...

Solange

2 months ago

Option B seems like the most practical use case for identity groups - being able to revoke credentials for an entire set of entities at once is really useful.

upvoted 0 times

Curt

29 days ago

Audit token usage is crucial too, it helps track and monitor the activity of identity groups.

upvoted 0 times

...

Rosann

1 months ago

I think option D is also important, consistently applying the same policies to a collection of entities can help with organization and security.

upvoted 0 times

...

Virgie

2 months ago

I agree, being able to revoke credentials for a whole set of entities at once is a powerful feature.

upvoted 0 times

...

Keneth

2 months ago

I think option D is the correct answer. Applying the same set of policies to a group makes sense for managing access and permissions efficiently.

upvoted 0 times

Florinda

1 months ago

I see your point, but I still believe option D is the best approach for consistent policy application.

upvoted 0 times

...

Valda

1 months ago

Option C is important too, auditing token usage helps ensure security.

upvoted 0 times

...

Buffy

2 months ago

I think option A could also be a valid choice, limiting policies for a specific group.

upvoted 0 times

...

Rikki

2 months ago

I agree, option D is the most efficient way to manage access for a group.

upvoted 0 times

...

Lindsey

2 months ago

I'm not sure, but I think A) Limit the policies that would otherwise apply to an entity in the group could also be a valid option.

upvoted 0 times

...

Kimberely

2 months ago

I agree with Xenia, D) makes the most sense for describing usage of an identity group.

upvoted 0 times

...

Xenia

3 months ago

I think the answer is D) Consistently apply the same set of policies to a collection of entities.

upvoted 0 times

...