VA-003 Assess Vault tokens Practice Question
A DevOps team generates a large number of short-lived tokens for automated deployments. They want to minimize storage overhead and avoid the need for token revocation. Which token type should they use?
⚠ Common exam trap
Watch out — candidates often confuse 'batch tokens' with 'service tokens' or assume all tokens require revocation, but the exam tests the specific understanding that batch tokens are stateless and avoid storage overhead, a key differentiator for high-volume automation scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Batch tokens
Batch tokens are the correct choice because they are designed for high-frequency, short-lived workloads where storage overhead and revocation are concerns. They are created by a parent token, have a configurable TTL (often minutes), and are never stored in Vault's storage backend, eliminating the need for revocation and reducing storage footprint.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Periodic tokens
Why it's wrong here
Periodic tokens are stored and need revocation, plus they have a max TTL.
- ✗
Orphan tokens
Why it's wrong here
Orphan tokens are still stored and require revocation, though they have no parent.
- ✗
Service tokens
Why it's wrong here
Service tokens are stored and require explicit revocation.
- ✓
Batch tokens
Why this is correct
Batch tokens are not stored and have no revocation, ideal for short-lived automated tasks.
Go deeper
Related to this question
About these practice questions
This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.