HashiCorp Vault Associate Vault Identity and Entities 3

Question 1

How are policies inherited through group membership in Vault's Identity system?

Accepted Answer

Policies on a group are inherited by all member entities and transitively by members of nested sub-groups

Answer

Vault's group hierarchy is transitive: an entity that is a member of a group inherits its policies, and if a group is a member of a parent group, those policies also cascade down.

Question 2

What is the purpose of a 'group alias' in Vault's Identity system?

Accepted Answer

To map an external group (e.g., an LDAP group) to a Vault internal group for automatic membership syncing

Answer

A group alias maps an external identity provider's group (such as an LDAP group DN) to a Vault external group, enabling automatic membership population during authentication.

Question 3

Which Vault CLI command would you use to read the details of a specific entity by its name?

Accepted Answer

vault read identity/entity/name/<name>

Answer

Entity details can be retrieved via 'vault read identity/entity/name/<name>', which returns the entity's ID, aliases, metadata, and attached policies.

Question 4

In a Vault namespace, how does identity work relative to the root namespace?

Accepted Answer

Each namespace has its own isolated identity store with separate entities and groups

Answer

Each Vault namespace maintains its own independent identity store, so entities, aliases, and groups in one namespace are completely separate from those in another.

Question 5

What entity-related information is included in a Vault audit log entry when a client authenticates?

Accepted Answer

The entity ID and entity name, if the authenticating identity is mapped to an entity

Answer

Vault audit log entries for authentication events include the entity ID and name so operators can correlate log entries back to a specific identity across auth methods.

HashiCorp Vault Practice Test

HashiCorp Vault Practice Test

HashiCorp Vault Associate Vault Identity and Entities 3