VA-003 num_uses Practice Question
A security team wants to issue tokens that can be used for exactly 10 API calls, after which they must be renewed. Which two token parameters should be set on the token role?
⚠ Common exam trap
Candidates often assume that `num_uses` combined with `renewable` allows renewal after use count exhaustion. However, in Vault, setting `num_uses` makes a token non-renewable regardless of the `renewable` flag. The correct pair to allow renewal (while sacrificing exact use count) is `ttl` and `renewable`.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ttl and renewable
To meet the requirement that tokens can be used for exactly 10 API calls and then be renewed, you must avoid setting `num_uses` because tokens with `num_uses` set cannot be renewed. Instead, set `ttl` to a short duration (e.g., 1 minute) and `renewable` to true. This allows the token to be used for a limited time (though not exactly 10 calls) and be renewed repeatedly. While this does not enforce exactly 10 calls, it aligns with the constraint that `num_uses` prevents renewal, making this the only viable pair among the options.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
period and num_uses
Why it's wrong here
Incorrect because period and num_uses still includes num_uses, preventing renewal.
- ✓
ttl and renewable
Why this is correct
Correct: ttl and renewable allow the token to be used for a duration and then be renewed, though it does not enforce exactly 10 uses.
- ✗
ttl and num_uses
Why it's wrong here
Incorrect because ttl and num_uses includes num_uses, preventing renewal.
- ✗
num_uses and renewable
Why it's wrong here
Incorrect: num_uses and renewable does not allow renewal because num_uses makes the token non-renewable.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.