VA-003 Manage Vault leases Practice Question
An admin wants to view all active leases for a specific secrets engine path. Which two approaches are valid? (Choose two.)
⚠ Common exam trap
Candidates often confuse the correct API endpoint paths for listing leases, such as `/lookup/` vs `/prefix/` vs `/list/`, and may incorrectly use `vault read` instead of `vault list`.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vault list sys/leases/lookup/<mount_path>
`vault list sys/leases/lookup/<mount_path>` lists all active lease IDs for a given secrets engine mount path by querying the lease lookup endpoint. Option C is correct because `vault list sys/leases/prefix/<mount_path>` lists leases that share a common prefix, which effectively returns all active leases under that mount path when the mount path is used as the prefix. Both commands use the `list` operation against the sys/leases API to retrieve active lease IDs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
vault write sys/leases/list lease_id=<mount_path>
Why it's wrong here
You cannot list leases by writing; you must use a read or list operation.
- ✓
vault list sys/leases/lookup/<mount_path>
Why this is correct
This path lists lease IDs for the given mount.
- ✓
vault list sys/leases/prefix/<mount_path>
Why this is correct
This path lists leases with the given prefix, which includes the mount path.
- ✗
vault lease list -prefix <mount_path>
Why it's wrong here
There is no 'vault lease list' command; the correct command is 'vault list'.
- ✗
vault read sys/leases/list/<mount_path>
Why it's wrong here
Correct path is sys/leases/lookup/ or sys/leases/prefix/, not sys/leases/list/.
Go deeper
Related to this question
About these practice questions
One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.