The following three policies exist in Vault What do these policies allow an organization to do? app.hcl
callcenter.hcl
rewrap.hcl
002 Exam QuestionsBrowse all questions from this exam
002 Exam - Question 14
Show AnswerHide Answer
Correct Answer: A
These three policies allow the organization to separate the permissions for different actions associated with the transit secret engine. The first policy permits updating (which can include encryption) using the key, the second policy allows updating (which can include decryption) using the key, and the third policy permits reading the key details and updating for rewrapping data. Thus, these policies enable separate permissions for distinct operations within the transit secret engine.
Discussion
2 commentsdaz_rekkaOption: A
Jan 17, 2024https://developer.hashicorp.com/vault/docs/secrets/transit
gixejod225
Oct 4, 2024C The most accurate statement describing what these policies allow the organization to do is C: "Encrypt, decrypt, and rewrap data using the transit engine all in one policy."