About the Author
- Ned Bellavance
Tech Reviewers
- Reviewer 1
- Reviewer 2
Exam Overview
- Setting Expectations
- Prerequisites
- Product Version Tested
- Chapter Summary
Exam Objectives
- High-Level Objectives
- Chapter Layout
- Chapter Summary
Objective 1: Compare Authentication Methods
- 1A: Describe authentication methods
- 1B: Choose an authentication method based on use case
- 1C: Differentiate human vs. system auth methods
- Chapter Summary
Objective 2: Create Vault policies
- 2A: Illustrate the value of Vault policy
- 2B: Describe Vault policy syntax: path
- 2C: Describe Vault policy syntax: capabilities
- 2D: Craft a Vault policy based on requirements
- Chapter Summary
Objective 3: Assess Vault tokens
- 3A: Describe Vault token
- 3B: Differentiate between service and batch tokens. Choose one based on use-case
- 3C: Describe root token uses and lifecycle
- 3D: Define token accessors
- 3E: Explain time-to-live
- 3F: Explain orphaned tokens
- 3G: Create tokens based on need
- Chapter Summary
Objective 4: Manage Vault leases
- 4A: Explain the purpose of a lease ID
- 4B: Renew leases
- 4C: Revoke leases
- Chapter Summary
Objective 5: Compare and configure Vault secrets engines
- 5D: Define secrets engines
- 5A: Choose a secret method based on use case
- 5B: Contrast dynamic secrets vs. static secrets and their use cases
- 5C: Define Transit engine
- Chapter Summary
Objective 6: Utilize Vault CLI
- CLI Primer
- 6A: Authenticate to Vault
- 6B: Configure authentication methods
- 6C: Configure Vault policies
- 6D: Access Vault secrets
- 6E: Enable Secret engines
- 6F: Configure environment variables
- Chapter Summary
Objective 7: Utilize Vault UI
- 7A: Authenticate to Vault
- 7B: Configure authentication methods
- 7C: Configure Vault policies
- 7D: Access Vault secrets
- 7E: Enable Secret engines
- Chapter Summary
Objective 8: Be aware of the Vault API
- 8A: Authenticate to Vault via Curl
- 8B: Access Vault secrets via Curl
- Chapter Summary
Objective 9: Explain Vault architecture
- 9A: Describe the encryption of data stored by Vault
- 9B: Describe cluster strategy
- 9C: Describe storage backends
- 9D: Describe the Vault agent
- 9E: Describe secrets caching
- 9F: Be aware of identities and groups
- 9G: Describe Shamir secret sharing and unsealing
- 9H: Be aware of replication
- 9I: Describe seal/unseal
- 9J: Explain response wrapping
- 9K: Explain the value of short-lived, dynamically generated secrets
- Chapter Summary
Objective 10: Explain encryption as a service
- 10A: Configure transit secret engine
- 10B: Encrypt and decrypt secrets
- 10C: Rotate the encryption key
- Chapter Summary