Certifications
HashiCorp Certified:
Vault Authoring and Operations Advanced
Demonstrate your production-level Vault expertise in this intensive, lab-based exam.
TechXchange is Coming
You can take two free exams with the purchase of a HashiConf at TechXchange ticket.
Read moreWho should take this exam
You should take the Vault Operations Advanced exam if you are a Cloud Engineer with production-level Vault operations expertise. You will need to demonstrate your ability to deploy, configure, manage, and monitor HashiCorp Vault, and you must also be able to evaluate Vault Enterprise functionality and use cases.
Exam Details
Assessment Type
Lab-based scenarios and multiple choice
Format
Online Proctored
Credential Expiration
2 years
Language
English
Duration
4 hours with one 15-min break
Price
$295 USD, plus locally applicable taxes and fees. Free retake included
Version tested
Vault 1.16
Keyboard
Common non-US QWERTY layouts supported by request
Prerequisites
Vault Associate certification (strongly recommend, or equivalent experience required)
Linux skills such as list and edit files via command terminal
Understanding of IP networking
Experience with Public Key Infrastructure (PKI), including PGP and TLS
Information security fundamentals such as network security and RBAC
Understand the concepts and functionality of infrastructure running in containers including starting and stopping services, and reading logs
Experience with Vault in a production setting is necessary
Exam Objectives
- 1a Enable and configure secret engines
- 1b Practice production hardening
- 1c Auto unseal Vault
- 1d Implement integrated storage for Community and Enterprise Vault
- 1e Enable and configure authentication methods
- 1f Practice secure Vault initialization
- 1g Regenerate a root token
- 1h Rekey Vault and rotate encryption keys
- 2a Monitor and understand Vault telemetry
- 2b Monitor and understand Vault audit logs
- 2c Monitor and understand Vault operational logs
- 3a Describe secure introduction of Vault clients
- 3b Describe the security implications of running Vault in Kubernetes
- 4a Configure a highly available (HA) cluster
- 4b [Vault Enterprise] Enable and configure disaster recovery (DR) replication
- 4c [Vault Enterprise] Promote a secondary cluster
- 5a [Vault Enterprise] Describe the benefits of auto unsealing with HSM
- 5b [Vault Enterprise] Describe the benefits and use cases of seal wrap (PKCS#11)
- 6a Use batch tokens
- 6b [Vault Enterprise] Describe the use cases of performance standby nodes
- 6c [Vault Enterprise] Enable and configure performance replication
- 6d [Vault Enterprise] Create a paths filter
- 7a Interpret Vault identity entities and groups
- 7b Write, deploy, and troubleshoot ACL policies
- 7c [Vault Enterprise] Understand Sentinel policies
- 7d [Vault Enterprise] Define control groups and describe their basic workflow
- 7e [Vault Enterprise] Describe and interpret multi-tenancy with namespaces
- 8a Securely configure auto-auth and token sink
- 8b Configure templating
Renew Your Certification
Understand your recertification options. Start by finding the scenario that applies to you and then evaluate your options. Know which exam version you passed by the 3-digit code on your credentials (badge and certificate).
To renew your certification, you will need to pass the Vault Operations Advanced exam again.
Unexpired certification
- Retake the exam starting 6 months before your expiration date
- Passing extends your current credentials' expiration date
Expired certification
- Retake the exam at any time
- Passing gives you a new set of credentials with a new expiration date
Learn more about recertification in our Knowledge base.
Visit our knowledge base
Review and follow the rules and requirements for taking exams before you register for an exam appointment. You are responsible for following the identification, system, and physical space requirements.
