VA-003 Utilize Vault CLI and API Practice Question
A user tries to renew their own token using 'vault token renew -self' and gets 'Error renewing token: Error making API request'. The token is still valid. What could be the cause?
⚠ Common exam trap
HashiCorp often tests the distinction between token validity and renewability, trapping candidates who assume a valid token can always be renewed, when in fact the renewable flag is a separate attribute checked before any policy or TTL logic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The token is not renewable.
The error 'Error renewing token: Error making API request' when using 'vault token renew -self' on a still-valid token indicates the token is not renewable. In Vault, tokens have a renewable flag; if set to false, the token cannot have its TTL extended, even if it is still valid. The error message is generic but the core issue is the token's non-renewable property, not a policy denial or server connectivity problem.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The token was created with a period.
Why it's wrong here
Incorrect. A token created with a period can still be renewable; the period only affects automatic renewal behavior, not the ability to manually renew.
- ✓
The token is not renewable.
Why this is correct
Correct. The token is not renewable, so attempting to renew it results in an error, even though the token is still valid.
- ✗
The token's policy denies renewal.
Why it's wrong here
Incorrect. Policy denial would typically produce a permission denied error, not a generic 'Error making API request'. The renewable flag is checked before policy evaluation.
- ✗
The Vault server is unreachable.
Why it's wrong here
Incorrect. If the server were unreachable, the error would be a connection or timeout error, not 'Error making API request'. The token is still valid, indicating server connectivity.
Go deeper
Related to this question
About these practice questions
One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.