VA-003 Assess Vault tokens Practice Question
Which THREE factors influence the maximum TTL of a token?
⚠ Common exam trap
Candidates often confuse the role's TTL (initial lifetime) with the role's max TTL (upper bound), leading them to incorrectly select the role's TTL as a factor influencing the maximum TTL of a token.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The max TTL of the auth method or mount.
The maximum TTL of a token is capped by the max TTL configured on the auth method or mount path. Even if a role or system default allows a longer TTL, the auth mount's max TTL acts as an upper boundary that cannot be exceeded. This ensures that each mount path enforces its own security limits independent of role-level settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The TTL set on the token role.
Why it's wrong here
The role's TTL is the initial TTL, not the max TTL.
- ✓
The max TTL of the auth method or mount.
Why this is correct
The auth method's max TTL imposes a limit.
- ✗
The token's current TTL.
Why it's wrong here
Current TTL is the remaining time, not a factor for max TTL.
- ✓
The max TTL set on the token role.
Why this is correct
The role's max TTL is one of the factors.
- ✓
The system's default max TTL (usually 32 days).
Why this is correct
The system default is a fallback if no explicit max TTL is set.
Go deeper
Related to this question
About these practice questions
This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.