Hashicorp Certified Vault Associate 002 · Free Practice Question Medium
Question 2
Suzy is a Vault user that needs to create and replace values at the path secrets/automation/apps/chef. Does the following policy permit her the permissions to do so?
- path "secrets/automation/apps/chef" {
- capabilities = ["create", "read", "list"]
- }
-
A
No, the policy would deny Suzy from performing certain actions
-
B
Yes, the policy has appropriate permissions
Reveal correct answer
Correct answer: A
Explanation
If Suzy needs to create AND replace values (update), she needs both create and update capabilities. Create to initially create new KV pairs, and then update to update the values of those KV pairs.
https://developer.hashicorp.com/vault/docs/concepts/policies
A.
The policy only grants Suzy the permissions to create, read, and list values at the path secrets/automation/apps/chef. However, it does not include the update capability, which is required for replacing values. Therefore, the policy would deny Suzy from performing the action of replacing values at the specified path.
B.
Incorrect. The policy only grants Suzy the permissions to create, read, and list values at the path secrets/automation/apps/chef However, it does not include the update capability, which is required for replacing values. Therefore, the policy would deny Suzy from performing the action of replacing values at the specified path.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
