Vault quiz

Test your Vault knowledge with a free interactive quiz — 20 questions with answers and explanations. No signup needed to play.

What is a Vault "policy"?

1. What is a Vault "policy"?
2. How does an application typically retrieve secrets from Vault at runtime in a common integration pattern?
3. What does "least privilege" mean in the context of designing Vault policies for different applications and teams?
4. Why is auto-unseal (using a cloud KMS like AWS KMS or Azure Key Vault) commonly preferred over manual Shamir key-holder unsealing in production?
5. What does Vault's "transit" secrets engine do?
6. What is Shamir's Secret Sharing used for in Vault's unseal process?
7. What is the key difference between Vault's KV (key-value) secrets engine and its database secrets engine?
8. Why is storing secrets directly in application source code or plain config files considered a bad practice that Vault addresses?
9. What is a Vault "secrets engine"?
10. What is a Vault "lease", in the context of dynamic secrets?
11. What problem does Vault Agent (or Vault's sidecar injector in Kubernetes) primarily solve?
12. What is HashiCorp Vault primarily used for?

More quizzes