HashiCorp Certified: Vault Associate (003)Exam HCVA0-003 Question # 85 Topic 9 Discussion

HashiCorp Certified: Vault Associate (003)Exam HCVA0-003 Question # 85 Topic 9 Discussion

HCVA0-003 Exam Topic 9 Question 85 Discussion:
Question #: 85
Topic #: 9

You have ciphertext stored in an Amazon S3 bucket encrypted by the key named prod-customer. Will Vault decrypt this data with the command vault write transit/decrypt/prod-customer ciphertext="vault:v4:Xa1f9FIJtn13em/Wb7QCsXsU/kCOn7..." given this output?

    $ vault read transit/keys/prod-customer

    Key Value

    --- -----

    ...

    keys map[4:1549347108 5:1549347109 6:1549347110]

    latest_version 6

    min_available_version 0

    min_decryption_version 4

    min_encryption_version 0

Will Vault decrypt this data for you by running the following command?

    $ vault write transit/decrypt/prod-customer ciphertext="vault:v4:Xa1f9FIJtn13em/Wb7QCsXsU/kCOn7..."


A.

Yes, because the minimum decryption key configuration is set to 4


B.

No, since the latest version of the key is 6


Get Premium HCVA0-003 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.