Skill · Security · Hold a system's secrets, from inventory to leak
Issue a secret with a bounded lifetime, renew it and revoke it in an emergency
Follow a secret from generation to destruction, choose between a static and a dynamic secret, have Vault issue database credentials with a bounded lifetime, renew their lease and revoke them all at once.
Start lesson 1The Security domain
- 4 lessons
- ~2 h 25 of reading
- 5 quizzes
- 0 proof lab
The path
Where it comes from, where it leads
What you need to know first, where you stand on this skill, and what it opens next. Your status is computed in your browser, from what you have read and passed.
Before · 2 prerequisites
- Store a secret in a vault and read it without ever writing it in clear
- Scope access to a vault to the strict minimum and explain a denial
Recommended before · 1
This skill, for you
Issue a secret with a bounded lifetime, renew it and revoke it in an emergency
Computing
It unlocks · nothing yet
No other skill requires it: it is an end-of-path skill.
The path through the foundations From the most upstream foundation to this skill: what is in place, what remains to read.
Lessons
How to learn it
4 lessons, about ~2 h 25, in program order. Each lesson ends with its quiz.
The program
4 lessons · ~2 h 25
Part 1 · Le cycle de vie, et le chiffrement qui le protège 2 lessons · ~1 h 25
Part 2 · Des secrets qui expirent d'eux-mêmes (in French) 2 lessons · ~1 h 00
Beyond the lessons
Assess, practise, pass the proof
Reading a lesson confirms nothing. A skill is confirmed by a passed quiz, practised in a guided lab, and put to the test by a challenge or a mission; an imported lab result is not verified by the site.
Assess yourself
5 quizzes
At the end of the lessons: passed at 70%, they confirm the skill.
Practice
No guided lab
No guided lab practices it yet.
Proof
No proof
Neither a challenge nor a mission with a proof yet.
Apply it on real infrastructure
Hands-on lessons: their labs count as practice and their quizzes assess you, without being required to acquire it.
Placement test
Preparing the questions…
Your answers in detail
For each question asked: your answer, the correct answer, its explanation and the page to reread.
Around it
Who requires it, who teaches it
Required by
Taught by
Same block · Hold a system's secrets, from inventory to leak
- List a system's secrets, rank them by criticality and keep their register
- Store a secret in a vault and read it without ever writing it in clear
- Scope access to a vault to the strict minimum and explain a denial
- Detect an exposed secret, measure the reach of the leak and deal with it
- Run a vault in production: initialise, seal, back up and monitor it