VA-003 Assess Vault tokens Practice Question
Exhibit
Refer to the exhibit. ``` $ vault write auth/token/create policies=default ttl=1h Error writing data to auth/token/create: Error making API request. URL: PUT http://127.0.0.1:8200/v1/auth/token/create Code: 400. Errors: * token count per user (3) exceeded ```
An administrator creates a token role with 'allowed_policies' and tries to create a child token. What does this error indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The token role's token_count_limit has been reached
The error 'token count per user (3) exceeded' indicates that the number of tokens issued for that entity (user or role) has exceeded the maximum allowed, which is controlled by the 'token_count_limit' parameter in the token role. Option D correctly identifies this limit as the cause. Option A is irrelevant because revocation count is not involved. Option B is incorrect because the error is about token count, not TTL. Option C is incorrect because the error is about quantity, not policy permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The token has been revoked too many times
Why it's wrong here
Revocation does not affect count limit.
- ✗
The token's TTL is too short
Why it's wrong here
TTL does not cause this error.
- ✗
The token's policy is not allowed by the role
Why it's wrong here
Policy mismatch would give a different error.
- ✓
The token role's token_count_limit has been reached
Why this is correct
The token_count_limit restricts the number of tokens a role can create.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.