HashiCorp Certified: Vault Associate (002) — Question 66

Which of the following statements are true about the default policy? (Choose two.)

Answer options

• A. It is one of the built-in policies
• B. Provides a common set of permissions and is included on all tokens by default
• C. Can not be modified or deleted
• D. Gives a super admin permissions, similar to a root user on a Linux machine
• E. Vault upgrade will overwrite any update you made to the default policy

Correct answer: A, B

Explanation

The correct answers are A and B because the default policy is indeed a built-in policy that provides a common set of permissions included with every token by default. Option C is incorrect because the default policy can be updated, although it cannot be removed. Option D is misleading since while it grants significant permissions, it doesn't equate to super admin permissions like a Linux root user. Option E is also false as Vault upgrades do not overwrite changes made to the default policy.