Free HashiCorp Vault-Associate Exam Questions

Thomas has authenticated to Vault using the API and has received the following response. What datamust Thomas parse from the response in order to continue making requests to Vault?textCollapseWrapCopy{"request_id": "65897160-fd8b-1f87-c24e-fdba14c9728e","lease_id": "","renewable": false,"lease_duration": 0,"data": null,"wrap_info": null,"warnings": null,"auth": {"client_token": "hvss.lzrmRe5Y3LMcDRmOttEjWoagd92fD29fxakwej_38djs","accessor": "EMX0nv4nr0Y1wXoaN7i0WDW1","policies": ["bryan", "default"],"token_policies": ["bryan", "default"],"metadata": {"username": "bryan"},"lease_duration": 2764800,"renewable": true,"entity_id": "40e203e8-818e-b6ad-4cb3-0befdbf9b598","token_type": "service", "orphan": true}}

What is the proper command to enable the AWS secrets engine at the default path?

When Vault is sealed, which are the only two operations available to a Vault administrator? (Select two) 

True or False? Once the lease for a dynamic secret has expired, Vault revokes the credentials on the backend platform for which they were created (i.e., database, AWS, Kubernetes).

Your organization has applications in a primary data center and a secondary warm-standby site. You want to configure Vault replication between the primary and secondary clusters. If the primary fails over to the secondary, the applications must interact with Vault without re-authenticating. What type of Vault replication would you use?