VA-003 Utilize Vault CLI and API Practice Question
An operator needs to create a periodic token with a period of 36 hours. Which command should they use?
⚠ Common exam trap
HashiCorp often tests the distinction between `-period` (for periodic tokens) and `-ttl` (for fixed-lifetime tokens), leading candidates to confuse the two and incorrectly choose `-ttl` when a renewable periodic token is required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vault token create -period=36h
The `vault token create -period=36h` command creates a periodic token with a specified renewal period of 36 hours. Periodic tokens have no explicit TTL; their lifetime is tied to the renewal period, and they can be renewed indefinitely as long as the parent token is valid. This matches the requirement for a token that automatically extends its lifetime every 36 hours.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
vault token create -period=36h
Why this is correct
Correct. The `-period=36h` flag creates a periodic token with a renewal period of 36 hours. Periodic tokens can be renewed indefinitely as long as the parent token is valid.
- ✗
vault token create -period=36h -explicit-max-ttl=36h
Why it's wrong here
Incorrect. Adding `-explicit-max-ttl=36h` limits the maximum lifetime of the token. For a pure periodic token that can be renewed indefinitely, you should not set an explicit max TTL.
- ✗
vault token create -ttl=36h
Why it's wrong here
Incorrect. The `-ttl=36h` flag sets a fixed lifetime for a non-periodic token. After 36 hours, the token expires and cannot be renewed.
- ✗
vault token create -explicit-max-ttl=36h
Why it's wrong here
Incorrect. The `-explicit-max-ttl=36h` flag sets an absolute maximum TTL but does not create a periodic token. It also does not set a renewal period.
Go deeper
Related to this question
About these practice questions
One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.