VA-003 Assess Vault tokens Practice Question
Exhibit
Key Value --- ----- accessor abc123def456 creation_time 2025-01-15T10:00:00Z creation_ttl 24h display_name app-token entity_id n/a expire_time 2025-01-16T10:00:00Z explicit_max_ttl 10h id hvs.xyz789 issue_time 2025-01-15T10:00:00Z meta map[role:my-role] num_uses 0 orphan false path auth/token/create policies [default my-policy] renewable true ttl 12h type service
Refer to the exhibit. A token was created with a creation_ttl of 24h, explicit_max_ttl of 10h, and a current ttl of 12h. What will happen when the token reaches its explicit_max_ttl?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The token will be revoked immediately.
The explicit_max_ttl overrides any other TTL settings. When the token reaches its explicit_max_ttl (10h from creation), it will be revoked by Vault regardless of renewable or creation_ttl. Options suggesting renewal or extension are incorrect.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The token will be automatically renewed by Vault.
Why it's wrong here
Vault does not automatically renew tokens; also explicit_max_ttl prevents renewal beyond that time.
- ✗
The token will remain valid until the creation_ttl expires.
Why it's wrong here
creation_ttl is overridden by explicit_max_ttl; the token will not survive past explicit_max_ttl.
- ✓
The token will be revoked immediately.
Why this is correct
explicit_max_ttl is an absolute deadline; the token is revoked exactly at that time.
- ✗
The token will have its TTL extended to 24h.
Why it's wrong here
explicit_max_ttl cannot be exceeded; the token cannot be extended beyond 10h.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.