Courseiva
Assess Vault tokenshardMultiple SelectObjective-mapped

VA-003 Token creation parameters Practice Question

Which THREE of the following are valid parameters when creating a token via the API?

⚠ Common exam trap

Candidates often mistake the `max_ttl` field as an input parameter for token creation, but it is not settable at creation time. They may also incorrectly consider `accessor` as an input parameter, but it is only returned in the response.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

num_uses

When creating a token via the Vault API, valid parameters include `num_uses` to set the number of times the token can be used, `ttl` to set the time-to-live, and `policies` to attach policies. `max_ttl` is not a direct input parameter; it is a property that may be inherited from the role or mount configuration. `accessor` is a read-only field returned in the response, not an input parameter.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • num_uses

    Why this is correct

    num_uses is a valid parameter for token creation; it limits the number of times the token can be used.

  • ttl

    Why this is correct

    ttl is a valid parameter that sets the time-to-live for the token.

  • policies

    Why this is correct

    policies is a valid parameter to attach policies to the token.

  • accessor

    Why it's wrong here

    accessor is not an input parameter; it is returned in the response but cannot be set at creation.

  • max_ttl

    Why it's wrong here

    max_ttl is not a direct creation parameter; it is derived from the role or mount configuration and cannot be set via the create endpoint.

About these practice questions

This VA-003 question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.