VA-003 Assess Vault tokens Practice Question
Exhibit
Refer to the exhibit. ``` $ vault token lookup -accessor av.xyz123... Key Value --- ----- creation_ttl 24h ttl 12h renewable true num_uses 5 policies [default mypolicy] ```
The token was created 12 hours ago and has not been used yet. What will happen if the token is not used or renewed?
⚠ Common exam trap
A common misconception is that tokens expire after a fixed period of non-use, but in Vault the TTL counts down from creation, and non-use simply means the token will not be renewed or its TTL extended.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It will expire in 12 hours
Vault tokens have a configurable Time-To-Live (TTL) and a maximum TTL. If a token is not used within its TTL, it will expire. Since the token was created 12 hours ago and has not been used, and the default TTL for many token types in Vault is 24 hours, the token will expire in 12 hours (the remaining TTL). This is because the token's TTL begins counting down from creation, not from first use.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It can be renewed indefinitely if used
Why it's wrong here
Renewal is possible but not automatic; also max_ttl not shown but may be set.
- ✗
It will expire when the number of uses reaches 0
Why it's wrong here
Even with num_uses remaining, the token expires after its TTL.
- ✗
It will expire immediately because it was not used within 12 hours
Why it's wrong here
The TTL is still 12h remaining; usage does not affect TTL.
- ✓
It will expire in 12 hours
Why this is correct
The current TTL is 12h, so without renewal, it expires in 12 hours.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.