HashiCorp credentialCER0342

HashiCorp Certified: Vault Operations Advanced

Vault
Official provider page
HashiCorp
Credential
Advanced
Level
Advanced
Exam duration
240 min
Validity / renewal
2 years

credential overview

About this credential

Demonstrate your advanced, production-level Vault operational expertise in an intensive, lab-based exam.

Who this is for

You should take the Vault Operations Advanced exam if you are a Cloud Engineer with advanced, production-level Vault operations expertise. You will need to demonstrate your ability to deploy, configure, manage, and monitor HashiCorp Vault, and you must also be able to evaluate Vault Enterprise functionality and use cases.

Assessment

Exam details

Assessment 1
Duration
240 min
Format
Online proctored
Price
USD 295

English

Exam blueprint

Skills measured

Create a working Vault server configuration given a scenario8 topics
  • Enable and configure secret engines
  • Practice production hardening
  • Auto unseal Vault
  • Implement integrated storage for Community and Enterprise Vault
  • Enable and configure authentication methods
  • Practice secure Vault initialization
  • Regenerate a root token
  • Rekey Vault and rotate encryption keys
Monitor a Vault environment3 topics
  • Monitor and understand Vault telemetry
  • Monitor and understand Vault audit logs
  • Monitor and understand Vault operational logs
Employ the Vault security model2 topics
  • Describe secure introduction of Vault clients
  • Describe the security implications of running Vault in Kubernetes
Build fault-tolerant Vault environments3 topics
  • Configure a highly available (HA) cluster
  • [Vault Enterprise] Enable and configure disaster recovery (DR) replication
  • [Vault Enterprise] Promote a secondary cluster
Understand the hardware security module (HSM) integration2 topics
  • [Vault Enterprise] Describe the benefits of auto unsealing with HSM
  • [Vault Enterprise] Describe the benefits and use cases of seal wrap (PKCS#11)
Scale Vault for performance4 topics
  • Use batch tokens
  • [Vault Enterprise] Describe the use cases of performance standby nodes
  • [Vault Enterprise] Enable and configure performance replication
  • [Vault Enterprise] Create a paths filter
Configure access control5 topics
  • Interpret Vault identity entities and groups
  • Write, deploy, and troubleshoot ACL policies
  • [Vault Enterprise] Understand Sentinel policies
  • [Vault Enterprise] Define control groups and describe their basic workflow
  • [Vault Enterprise] Describe and interpret multi-tenancy with namespaces
Configure Vault Agent2 topics
  • Securely configure auto-auth and token sink
  • Configure templating

Before you certify

Requirements and recommended experience

Recommended / equivalent experience accepted

Vault Associate certification (strongly recommend, or equivalent experience required)

Required

Linux skills such as list and edit files via command terminal

Required

Understanding of IP networking

Required

Experience with Public Key Infrastructure (PKI), including PGP and TLS

Required

Information security fundamentals such as network security and RBAC

Required

Understand the concepts and functionality of infrastructure running in containers including starting and stopping services, and reading logs

Credential lifecycle

Status, validity and renewal

Validity: 2 years
Lifecycle information

Retake the Advanced exam starting 6 months before expiration · Extend current credential expiration date

Lifecycle information

Retake the Advanced exam at any time · Receive a new set of credentials with a new expiration date

Corporate certification enablement

Turn this pathway into a team capability plan

We can align the learning path, instructor support, practice environment and delivery schedule to your team’s roles and certification target.