Which is a benefit of Vault’s path-based system for policies?

Vault policies are path-based, meaning access is granted or denied against Vault API paths and the operations allowed on those paths. This gives administrators granular control over what a user, application, or machine can do. For example, one policy can allow reading secrets under one path, while another allows managing configuration under a different path. This model also supports simple policy syntax and wildcard matching, making it scalable without requiring one completely separate rule for every object. Option A is too absolute because permissions are not automatically unique for every path; they are defined by policy. Option C is wrong because Vault paths are API paths, not a mounted operating-system file system. Therefore, option B correctly describes the real policy benefit. HashiCorp confirms that Vault policies are path-based and declarative.

================