VA-003 Utilize Vault CLI and API Practice Question
A user wants to view information about their current token, including its policies and TTL. Which TWO CLI commands can be used?
⚠ Common exam trap
HashiCorp often tests the distinction between `vault token lookup` (which works for self-lookup without arguments) and `vault token info` (which does not exist), trapping candidates who assume a generic 'info' subcommand exists across all CLI tools.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vault read auth/token/lookup-self
`vault read auth/token/lookup-self` is a standard Vault CLI command that retrieves information about the current token, including its policies, Time-To-Live (TTL), and other metadata. This command uses the token lookup-self API endpoint, which is specifically designed for the calling token to inspect itself without needing explicit read permissions on its own token ID.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
vault read auth/token/lookup-self
Why this is correct
Correct. `vault read auth/token/lookup-self` uses the lookup-self endpoint to retrieve the current token's metadata, policies, and TTL.
- ✗
vault token list
Why it's wrong here
Incorrect. `vault token list` lists all tokens (requires appropriate permissions) and does not show details of the current token.
- ✗
vault write auth/token/lookup
Why it's wrong here
Incorrect. `vault write auth/token/lookup` is used to look up a specific token by its ID, typically requiring sudo capabilities; it is not for self-lookup.
- ✗
vault token info
Why it's wrong here
Incorrect. `vault token info` is not a valid Vault CLI command. The correct command for self-lookup is `vault token lookup`.
- ✓
vault token lookup
Why this is correct
Correct. `vault token lookup` without arguments performs a self-lookup, returning the current token's information.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.