312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ49

Introduction to DevSecOps

Richard Branson works as a DevSecOps engineer at an IT company that develops apps for Android mobiles. To manage the secret information of an application across various phases of the development lifecycle and to provide fine-grained access to each secret, he wants to integrate HashiCorp Vault with Jenkins.

To access the vault from Jenkins, Richard installed the hashicorp-vault-plugin and ran a vault instance. He then selected the AppRole authentication method, which allows apps to access the vault using a predefined role.

Which of the following commands should Richard use to enable AppRole authentication?

  • A enable auth vault approle
  • B vault auth enable approle
  • C enable vault auth approle
  • D auth vault enable approle
Explanation

HashiCorp Vault uses the CLI syntax vault auth enable <auth-method-type> to enable a specific authentication method. For the AppRole auth method, which allows machines or apps to authenticate with Vault-defined roles, the correct command is vault auth enable approle. This command registers the AppRole auth backend at its default path (auth/approle/), after which roles, policies, and associated RoleIDs/SecretIDs can be configured for applications such as Jenkins to authenticate against Vault.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!