VA-003 Assess Vault tokens Practice Question
Which TWO of the following are valid reasons for a token renewal to fail with a 'lease not found' or 'token not found' error? (Select exactly 2 options.)
⚠ Common exam trap
HashiCorp Vault exams often test the distinction between token expiration (which removes the lease) and other token properties like num_uses or orphan status, leading candidates to incorrectly select options that describe valid tokens that are still renewable.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The token has expired
A Vault token that has expired is no longer valid for renewal. When a token's lease expires, the auth backend or secret engine removes the lease entry, so any renewal attempt returns 'lease not found' or 'token not found'. Option E is correct because batch tokens are designed to be non-renewable; they have no associated lease, so any renewal attempt results in a 'token not found' error. This is a fundamental behavior of Vault's lease lifecycle: expired tokens and batch tokens cannot be renewed and must be re-authenticated.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The token has expired
Why this is correct
An expired token will return token not found.
- ✗
The token has num_uses set to 0
Why it's wrong here
num_uses=0 means unlimited, so it is still renewable.
- ✗
The token has exceeded its max TTL
Why it's wrong here
This would give a permission denied error, not lease not found.
- ✗
The token is an orphan token
Why it's wrong here
Orphan tokens can be renewed normally.
- ✓
The token is a batch token
Why this is correct
Batch tokens are not renewable and will return lease not found.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.