HashiCorpHashiCorp
VAULT-ASSOCIATE-002 · Question #37
VAULT-ASSOCIATE-002 Question #37: Real Exam Question with Answer & Explanation
The correct answer is A: Generates batch tokens with TTL set to 5 minutes. This AppRole authentication method is configured to issue batch tokens, with a Time To Live (TTL) for these tokens explicitly set to 5 minutes.
Submitted by yuki_2020· Apr 18, 2026Administer Vault
Question
Use this screenshot to answer the question below: Which statement describes this AppRole auth method configuration?
Options
- AGenerates batch tokens with TTL set to 5 minutes
- BGenerates multiple tokens with TTL set to 5 minutes
- CIt is enabled at "App1" path
- DIt is enabled at "auth_approle_f23dd79f" path
Explanation
This AppRole authentication method is configured to issue batch tokens, with a Time To Live (TTL) for these tokens explicitly set to 5 minutes.
Common mistakes.
- B. While the configuration generates tokens with a 5-minute TTL, specifying 'batch tokens' is more precise than 'multiple tokens' as it indicates a specific token type in Vault.
- C. The statement asserts the AppRole is enabled at the 'App1' path, but 'App1' is typically a role name within an AppRole mount, not the mount path itself.
- D. The statement suggests the AppRole is enabled at 'auth_approle_f23dd79f' path; however, this choice describes the mount path, not the specific token generation configuration as precisely as option A.
Concept tested. AppRole token configuration
Reference. https://developer.hashicorp.com/vault/docs/auth/approle#token-configuration
Topics
#AppRole#Auth Methods#Tokens#Configuration
Community Discussion
No community discussion yet for this question.