A developer uses the transit secrets engine to encrypt application data. Where is the plaintext stored after encryption?

AInside Vault for later retrieval

BIn the storage backend as a KV v2 version

CVault does not store the plaintext; the caller stores the ciphertext externally

DIn the token accessor index

Related Questions

A team rotates a transit encryption key and still needs previously encrypted data to remain readable...

medium

An application sends plaintext to transit/encrypt/my-key through the HTTP API. Why must the plaintex...

medium

A security team wants an almost untrusted process to move old transit ciphertext to the newest key v...

hard

An application stores transit ciphertext that begins vault:v3:. What does v3 identify?...

medium

A team wants identical plaintext values with the same context to produce identical transit ciphertex...

hard

View all Encryption as a Service questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.