HashiCorp Vault Associate Vault Identity and Entities

Question 1

What is a Vault entity in the context of the Identity secrets engine?

Accepted Answer

A logical representation of a client that can have multiple aliases across different auth methods

Answer

A Vault entity is a logical abstraction representing a user or system that may authenticate via different auth methods, each mapped as an alias on that entity.

Question 2

What is an alias in the Vault Identity system?

Accepted Answer

A mapping that ties an entity to a specific auth method's local identifier

Answer

An alias links a Vault entity to the identifier used by a particular auth method (e.g., a GitHub username or LDAP DN), allowing multiple auth identities to map to one entity.

Question 3

When a client authenticates to Vault and no existing entity alias matches, what does Vault do?

Accepted Answer

Automatically creates a new entity and a corresponding alias for that auth method

Answer

Vault automatically creates a new entity and alias the first time a client authenticates with a new auth method identity, enabling seamless identity tracking.

Question 4

What is the primary benefit of attaching policies directly to a Vault entity rather than relying solely on auth method policies?

Accepted Answer

Policies on an entity are applied regardless of which auth method was used to authenticate

Answer

Policies attached to an entity are included in the token's policy set no matter which auth method the client used, enabling consistent access control across login methods.

Question 5

What is an Identity group in Vault?

Accepted Answer

A collection of entities (or other groups) that can share a common set of policies and metadata

Answer

An Identity group is a collection of entities and sub-groups that inherits shared policies and metadata, making it easy to manage access for a set of users collectively.

HashiCorp Vault Practice Test

HashiCorp Vault Practice Test

HashiCorp Vault Associate Vault Identity and Entities