HashiCorp Certified - Vault Associate Course - Lab—TOTP Secrets Engine

The video tutorial demonstrates how to use the TOTP Secrets Engine with AWS. It covers enabling the TOTP Secrets Engine in Vault, creating a new IAM user in AWS, assigning a virtual MFA device, and configuring Vault to read and provide TOTP codes. The tutorial concludes with testing the MFA setup to ensure it works correctly, using Vault as a virtual MFA device for AWS IAM users.

What is the first step in enabling the TOTP Secrets Engine in Vault?

• Enable the TOTP Secrets Engine

• Assign a virtual MFA device

• Create a new IAM user

• Retrieve the secret key

What is the purpose of creating a new IAM user in AWS during this setup?

• To retrieve the secret key

• To list available secrets

• To assign admin privileges for testing

• To enable TOTP Secrets Engine

Which of the following is required to assign a virtual MFA device?

• A mobile device

• Admin privileges

• The URL and secret key

• A physical RSA token

What is the final step to complete the MFA setup?

• Create a new IAM user

• Enable TOTP Secrets Engine

• Provide the second code to AWS

• Retrieve the URL

How can you verify that the MFA setup is successful?

• By signing in with the new user and providing the MFA code

• By listing the secrets in Vault

• By creating another IAM user

• By scanning the QR code again

What is the advantage of using Vault for MFA over a mobile device?

• It is less expensive

• It eliminates the need for physical tokens

• It is more secure

• It is faster to set up

Which account types can benefit from this TOTP setup?

• Guest accounts

• Both root and IAM accounts

• IAM accounts only

• Root accounts only