VA-002-P Exam Dumps | If a client is currently assigned the following policy, what additional policy can be added to ensure

<< Prev Question Next Question >>

Question 22/71

If a client is currently assigned the following policy, what additional policy can be added to ensure they cannot access the data stored at secret/apps/confidential but still, read all other secrets?

A. path "secret/apps/confidential/*" {
capabilities = ["deny"]
}

B. path "secret/apps/*" {
capabilities = ["deny"]
}

C. path "secret/apps/confidential" {
capabilities = ["deny"]
}

D. path "secret/apps/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "secret/*" {
capabilities = ["read", "deny"]
}

Question 22/71

LEAVE A REPLY

Download PDF File