HashiCorp Certified: Vault Associate (002) — Question 46

Which Vault secret engine may be used to build your own internal certificate authority?

Answer options

• A. Transit
• B. PKI
• C. PostgreSQL
• D. Generic

Correct answer: B

Explanation

The PKI secret engine is designed specifically for managing certificates and can be used to set up an internal certificate authority. The other options, such as Transit, PostgreSQL, and Generic, do not provide the necessary features for certificate management.