VA-003 Assess Vault tokens Practice Question
An application uses a periodic token with period=24h. The application renews every 12h. After 48h, the token is still valid. After 72h, the token is still valid. What is the maximum lifetime of this periodic token?
⚠ Common exam trap
Watch out — candidates often confuse the token's period (the renewal window) with a maximum lifetime, assuming the token expires after the period even if renewed, when in fact periodic tokens can be renewed indefinitely as long as the renewal occurs before the period ends.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Unlimited (as long as it keeps renewing)
A periodic token with a defined period (e.g., 24h) has no maximum lifetime; it remains valid indefinitely as long as it is renewed before the period expires. In this scenario, the token is renewed every 12h (well within the 24h period), so after 48h and 72h it is still valid because each renewal resets the token's lifetime, effectively giving it an unlimited lifespan. This behavior is inherent to periodic tokens in Vault, which are designed for long-lived sessions with regular re-authentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Unlimited (as long as it keeps renewing)
Why this is correct
Periodic tokens have no fixed maximum lifetime; each renewal resets the validity window rather than counting toward an absolute expiry. Because the application renews every 12h against a 24h period, the token stays valid indefinitely, so the lifetime is effectively unlimited while renewals continue.
- ✗
72h
Why it's wrong here
A 72h maximum would have invalidated the token at the 72h check, but the stem confirms it was still valid at that point. It is tempting as three periods, and would be correct if renewal stopped extending the token's life after the third period.
- ✗
48h
Why it's wrong here
A 48h maximum would have invalidated the token at the 48h check, yet the stem states it remained valid then. It is tempting as double the period, and would be correct if the token had been issued without renewal extending its life beyond two periods.
- ✗
24h
Why it's wrong here
A 24h maximum would have invalidated the token at the first renewal boundary, contradicting its validity at 48h and 72h. It is tempting as the period value, and would be correct if the token were non-renewable and expired after a single period.
Go deeper
Related to this question
About these practice questions
One of 366 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.