Free Online HashiCorp Vault-Associate Practice Test

Smelly Candles, LLC is using Vault to encrypt customer data to ensure it is always stored in a secure fashion. Mostafa is developing a new application integration to send new customer data to be encrypted. He has created the following CURL request:

curl \

--header "X-Vault-Token: s.sf4vj1rFV5PvQSbrxQFsfbXA" \

--request POST \

--data @data.json \

https://prod-vault.smelly.com:8200/v1/transit/encrypt/customer-data

What would be contained within the data.json file?

Tommy has written an AWS Lambda function that will perform certain tasks for the organization when data has been uploaded to an S3 bucket. Security policies for the organization do not allow Tommy to hardcode any type of credential within the Lambda code or environment variables. However, Tommy needs to retrieve a credential from Vault to write data to an on-premises database.

What auth method should Tommy use in Vault to meet the requirements while not violating security policies?

Your organization recently suffered a security breach on a specific application, and the security response team believes that MySQL database credentials were likely obtained during the event. The application generated the credentials using the database secrets engine in Vault mounted the path database/.

How can you quickly revoke all of the secrets generated by this secrets engine?