Courseiva
Manage Vault leasesmediumMultiple SelectObjective-mapped

VA-003 Manage Vault leases Practice Question

Which two commands can be used to manually revoke leases? (Choose two.)

⚠ Common exam trap

In the HashiCorp Vault exam, candidates often confuse lease revocation with token revocation, leading them to mistakenly choose `vault token revoke` (option B) when the question specifically asks about leases, not tokens.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

vault lease revoke <lease_id>

The `vault lease revoke <lease_id>` command is specifically designed to manually revoke a single lease by its unique identifier. This directly terminates the associated secret's validity and any derived tokens, aligning with the requirement to manually revoke leases in Vault.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • vault secrets disable <path>

    Why it's wrong here

    This disables the entire secret engine, which is more heavy-handed.

  • vault token revoke <token>

    Why it's wrong here

    This revokes a token and its associated leases, not a direct lease revoke.

  • vault lease revoke <lease_id>

    Why this is correct

    This revokes a specific lease.

  • vault lease renew <lease_id>

    Why it's wrong here

    This renews a lease, not revokes.

  • vault lease revoke -prefix <prefix>

    Why this is correct

    This revokes all leases under the given prefix.

About these practice questions

One of 498 original VA-003 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.