VA-003 Assess Vault tokens Practice Question
An admin creates a token with TTL=48h and explicit_max_ttl=120h. The token is renewed every 24h. After 10 days, will the token still be valid?
⚠ Common exam trap
In HashiCorp Vault, the explicit_max_ttl sets an absolute upper bound on token lifetime regardless of renewals. Candidates often mistakenly think that renewals reset the clock, but the total time since token creation cannot exceed explicit_max_ttl.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
No, because the total lifetime cannot exceed the explicit_max_ttl of 120h.
The token's total lifetime is capped by the `explicit_max_ttl` of 120 hours (5 days). Even though the token is renewed every 24 hours, the cumulative time since creation cannot exceed the explicit maximum TTL. After 10 days (240 hours), the token will have long surpassed the 120-hour limit and will be invalid.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Yes, because TTL refreshes to 48h on each renewal.
Why it's wrong here
Renewal does not extend beyond explicit_max_ttl.
- ✗
Yes, if renewed before TTL expires, it can persist indefinitely.
Why it's wrong here
Explicit_max_ttl imposes a hard limit.
- ✓
No, because the total lifetime cannot exceed the explicit_max_ttl of 120h.
Why this is correct
Explicit_max_ttl caps the total lifetime regardless of renewals.
- ✗
No, because tokens cannot be renewed more than 5 times.
Why it's wrong here
There's no fixed limit on number of renewals.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.