VA-002 Question 20

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C is also correct . these questions are stupid. the best is bar/+ for the read and only bar/ for the list which respects the least privilege standard.

• Chose D1

  I just tried on kv1 and D works . kv2 is a different story as the list requires metadata path "secret/bar/+" { capabilities = ["read", "list"] } EOF

• Chose A2

  D means it grants access only to one additional level under secret/bar/, not recursively to all secrets within it. If the goal is to read all secrets under secret/bar/ and list them, the correct choice would be option A