HashiCorp Certified - Vault Associate Course - Exam Tips for Objective 2

The video tutorial provides exam tips for Objective 2, focusing on understanding vault policies. It covers the basics of policies, their path-based nature, and default denial of access. The tutorial explains the root and default policies, capabilities like create, read, update, delete, and the difference between create and update. It also discusses protected paths, policy customization using glob and templating options, and concludes by encouraging confidence in writing vault policies.

What is the default behavior of Vault policies if no specific policy is set for a path?

• Access is logged but not controlled

• Access is denied by default

• Access is granted by default

• Access is granted with limited permissions

Which of the following is NOT a proper capability in Vault policies?

• Create

• Update

• Write

• Delete

What is the key difference between the 'create' and 'update' capabilities in Vault policies?

• 'Create' is for existing objects, 'Update' is for new objects

• 'Create' is for new objects, 'Update' is for existing objects

• Neither is used in Vault policies

• Both are used interchangeably

Which symbol is used in Vault policies for pattern matching?

• Asterisk (*)

• Plus (+)

• Question mark (?)

• Dollar sign ($)

What should you understand about entity IDs or names when customizing Vault policies?

• They are used for basic templating options

• They are irrelevant to policy customization

• They are used for identifying paths

• They are only used in root policies