VA-003 Manage Vault leases Practice Question
Exhibit
Key Value --- ----- lease_id database/creds/readonly/xyz789 lease_duration 30m lease_renewable true password ... username ...
Refer to the exhibit. An operator wants the credential to be valid for exactly 2 hours. What should they do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Increase the role's max_ttl to 2h.
To allow a 2-hour total lifetime, the role's max_ttl must be at least 2h. The current lease TTL is 30m but can be renewed up to the role's max_ttl. Simply renewing with 2h TTL will fail if max_ttl is lower. Increasing mount's max_lease_ttl does not change the role's maximum. Requesting a new credential does not have a direct TTL parameter.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increase the mount's max_lease_ttl to 2h.
Why it's wrong here
Mount's max_lease_ttl is a global cap but does not override role's max_ttl.
- ✗
Renew the lease with a TTL of 2h.
Why it's wrong here
Renewal TTL cannot exceed the role's max_ttl; if max_ttl is 30m, the renewal will be capped.
- ✓
Increase the role's max_ttl to 2h.
Why this is correct
This allows renewals up to 2h, enabling the desired lifetime.
- ✗
Request a new credential with a TTL of 2h.
Why it's wrong here
The credential request does not accept a TTL parameter; TTL is determined by the role.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.