VA-003 Assess Vault tokens Practice Question
A Vault administrator wants to ensure that when a parent token is revoked, all child tokens are also automatically revoked. Which option should they use?
⚠ Common exam trap
Many candidates confuse the 'cascade' parameter with the 'force' parameter or mistakenly think that setting an 'orphan' property on a token can retroactively change its parent-child relationship, when in fact orphan status is determined at creation and is immutable.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the 'cascade=true' parameter when revoking the parent token
Vault's token revocation system supports a 'cascade' parameter that, when set to 'true', ensures that revoking a parent token also revokes all its child tokens. This is the intended mechanism for hierarchical token cleanup, as child tokens are tracked via the parent token's accessor and are recursively invalidated.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the 'force' parameter when revoking the parent token
Why it's wrong here
Force ignores errors but does not cascade.
- ✗
Revoke the parent token using the 'revoke-orphan' endpoint
Why it's wrong here
revoke-orphan revokes the token but orphans children.
- ✗
Set the parent token's orphan property to 'false'
Why it's wrong here
That setting does not control revocation cascade.
- ✓
Use the 'cascade=true' parameter when revoking the parent token
Why this is correct
Cascade revokes all child tokens recursively.
Go deeper
Related to this question
About these practice questions
One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.