HashiCorp Certified: Vault Associate (002) — Question 79

What is not a function provided by Vault’s transit secret engine?

Answer options

• A. Generating random bytes
• B. Encrypting data
• C. Storing ciphertext data
• D. Verifying signed data
• E. None of the above

Correct answer: C

Explanation

The correct answer is C because the transit secret engine is designed specifically for encryption, decryption, and other cryptographic operations, but it does not store ciphertext data. Options A, B, and D are all valid functions of the transit secret engine, and E is incorrect as it implies that all options are not functions, which is not true.