You have enabled the database secrets engine at the database/ path and created the readonly role. You run vault read, and the output shown in the exhibit is returned.
Which command renews the given lease?
Exhibit:
$ vault read database/creds/readonly
lease_id database/creds/readonly/fyF5xDomnKeCHNZNQgStwBKD
lease_duration 1h
lease_renewable true
password Ala-ckirtymYaXACplHn
username v-token-readonly-6iRIcGv8tLpu816oblPY-1556567086

• A. vault lease renew database/creds/readonly/fyF5xDomnKeCHNZNQgStwBKD
• B. Leases with the parameter lease_renewable set to true are renewed automatically.
• C. vault lease renew database/creds/readonly/
• D. vault lease renew

解説: (CertShiken メンバーにのみ表示されます)

Which auth method is ideal for machine-to-machine authentication?

• A. GitHub
• B. UserPass
• C. AppRole
• D. Okta

解説: (CertShiken メンバーにのみ表示されます)

You are using Vault CLI and enable the database secrets engine on the default path of database/. However, the DevOps team wants to enable another database secrets engine for testing but receives an error stating the path is already in use. How can you enable a second database secrets engine using the CLI?

• A. vault secrets enable -force database
• B. vault secrets enable database2/
• C. vault secrets enable database database2/
• D. vault secrets enable -path=database2 database

解説: (CertShiken メンバーにのみ表示されます)

A user is assigned the following policy, and they can successfully retrieve secrets using the CLI. However, the user reports receiving an error message in the UI. Why can't the user access the secret in the Vault UI?
path " kv/apps/app01 " { capabilities = [ " read " ] }
Successful retrieval using the CLI

(Error: Permission denied in UI)

• A. The user needs list permissions to browse the UI
• B. The user doesn't have permissions to retrieve the data from the UI, only the CLI
• C. The user's token is invalid
• D. The user doesn't know what they're doing

解説: (CertShiken メンバーにのみ表示されます)

Which of the following statements best describes the difference between static and dynamic credentials in a secrets management system?

• A. Static credentials only apply to specific use cases, while dynamic credentials can be used everywhere.
• B. Static credentials are ephemeral and rotated frequently, while dynamic credentials remain unchanged indefinitely.
• C. Static credentials often remain persistent for long periods of time, while dynamic are short-lived and auto-rotated.
• D. They are functionally identical-the only difference is what secrets engine creates them.

解説: (CertShiken メンバーにのみ表示されます)