HashiCorp Certified: Vault Associate (002) — Question 4

You have a 2GB Base64 binary large object (blob) that needs to be encrypted. Which of the following best describes the transit secrets engine?

Answer options

• A. A data key encrypts the blob locally, and the same key decrypts the blob locally.
• B. To process such a large blob. Vault will temporarily store it in the storage backend.
• C. Vault will store the blob permanently. Be sure to run Vault on a compute optimized machine.
• D. The transit engine is not a good solution for binaries of this size.

Correct answer: D

Explanation

The correct answer is D because the transit secrets engine is not designed for handling large binaries like a 2GB blob. Options A, B, and C incorrectly suggest that the transit engine can manage the encryption and storage of such a large object, which it cannot effectively do.