HashiCorp Certified - Vault Associate Course - Working with Policies

The video tutorial covers how to work with policies in Vault, including creating tokens associated with specific policies, testing these policies to ensure they meet customer requirements, and validating that they adhere to the principle of least privilege. It also discusses the creation of administrative policies for Vault operators, highlighting the importance of path-based permissions and the use of the sys path for backend functions.

What command is used to create a new token with a specific policy in Vault?

• vault token new

• vault policy assign

• vault token create

• vault token generate

What principle should policies follow to ensure minimal permissions are granted?

• Selective Privilege

• Equal Privilege

• Least Privilege

• Maximum Privilege

Which of the following is NOT a requirement for the example policy discussed?

• Read AWS credentials

• Read secrets from a specific path

• Request AWS credentials

• Write to S3 bucket

What is the purpose of testing policies in Vault?

• To ensure they grant maximum permissions

• To verify they meet customer requirements

• To check if they can create new tokens

• To ensure they are renewable

Which path is commonly associated with administrative functions in Vault?

• vault/

• config/

• sys/

• admin/

What capability is required for certain root-protected paths in Vault?

• root

• sudo

• superuser

• admin

Which task is NOT mentioned as an example of an administrative task in Vault?

• Handling licensing

• Creating new tokens

• Rotating keys

• Configuring the UI