Courseiva
Assess Vault tokenseasyMultiple SelectObjective-mapped

VA-003 Assess Vault tokens Practice Question

Which TWO statements are true about batch tokens?

⚠ Common exam trap

The Vault exam often tests the misconception that all Vault tokens support renewal and lookup, but batch tokens are explicitly excluded from these operations due to their stateless, non-persistent nature.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Batch tokens cannot be renewed or revoked

Batch tokens are designed to be lightweight and do not support renewal or revocation. They are not persisted in Vault's storage backend; instead, they are generated on-the-fly using a keyed hash (HMAC) and validated by the server without storing them. This makes them ideal for high-frequency, short-lived workloads where the overhead of managing a full token lifecycle is undesirable.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Batch tokens can be renewed to extend their lifetime

    Why it's wrong here

    They are not renewable.

  • Batch tokens cannot be renewed or revoked

    Why this is correct

    They have a fixed lifetime and cannot be changed.

  • Batch tokens are not stored in Vault's storage backend

    Why this is correct

    They are not stored, only the accessor is stored for deduplication.

  • Batch tokens can be looked up using the lookup endpoint

    Why it's wrong here

    Batch tokens cannot be looked up because they are not stored.

About these practice questions

Courseiva writes every VA-003 question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This VA-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VA-003 exam.