Hashicorp Certified Vault Associate 002 · Free Practice Question Easy
Question 3
When generating a dynamic secret, what value is returned that a user can use to renew or revoke the lease?
-
A
lease_id -
B
lease_max -
C
token_ttl -
D
renewable
Reveal correct answer
Correct answer: A
Explanation
When creating a dynamic secret, Vault always returns a lease_id. This lease_id can be used to do a vault lease renew or a vault lease revoke command to manage the lease of a secret.
https://developer.hashicorp.com/vault/docs/concepts/lease#lease-renew-and-revoke
A.
The lease_id is the value returned when generating a dynamic secret that the user can use to renew or revoke the lease. It uniquely identifies the lease associated with the dynamic secret and is essential for managing the lifecycle of the secret.
B.
The lease_max represents the maximum duration for which the lease associated with the dynamic secret can be valid. It defines the upper limit of the lease duration but is not the value that the user can use to renew or revoke the lease of the dynamic secret.
C.
The token_ttl refers to the time-to-live (TTL) of the token associated with the dynamic secret. While it is related to the duration for which the token is valid, it is not the value that the user can use to renew or revoke the lease of the dynamic secret.
D.
The renewable attribute indicates whether the lease associated with the dynamic secret is renewable or not. While it provides information about the renewability of the lease, it is not the specific value that the user can use to directly renew or revoke the lease.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
