HashiCorp Certified: Vault Associate (002) — Question 42

Which of the following statements describe the secrets engine in Vault? (Choose three.)

Answer options

• A. Some secrets engines simply store and read data
• B. Once enabled, you cannot disable the secrets engine
• C. You can build your own custom secrets engine
• D. Each secrets engine is isolated to its path
• E. A secrets engine cannot be enabled at multiple paths

Correct answer: A, C, D

Explanation

The correct answers A, C, and D highlight the capabilities and behaviors of secrets engines in Vault. Option B is incorrect because while some engines can be challenging to disable, it's not universally true. Option E is also incorrect, as certain configurations can allow a secrets engine to be enabled at multiple paths.