VAULT-ASSOCIATE-002 · Question #37
Use this screenshot to answer the question below: Which statement describes this AppRole auth method configuration?
The correct answer is A. Generates batch tokens with TTL set to 5 minutes. This AppRole authentication method is configured to issue batch tokens, with a Time To Live (TTL) for these tokens explicitly set to 5 minutes.
Question
Exhibit
Options
- AGenerates batch tokens with TTL set to 5 minutes
- BGenerates multiple tokens with TTL set to 5 minutes
- CIt is enabled at "App1" path
- DIt is enabled at "auth_approle_f23dd79f" path
How the community answered
(20 responses)- A90% (18)
- C5% (1)
- D5% (1)
Why each option
This AppRole authentication method is configured to issue batch tokens, with a Time To Live (TTL) for these tokens explicitly set to 5 minutes.
The AppRole configuration shown specifies the `token_type` as 'batch', which indicates that generated tokens will be batch tokens, and the `token_ttl` parameter is set to '5m', meaning these batch tokens will have a lifespan of 5 minutes.
While the configuration generates tokens with a 5-minute TTL, specifying 'batch tokens' is more precise than 'multiple tokens' as it indicates a specific token type in Vault.
The statement asserts the AppRole is enabled at the 'App1' path, but 'App1' is typically a role name within an AppRole mount, not the mount path itself.
The statement suggests the AppRole is enabled at 'auth_approle_f23dd79f' path; however, this choice describes the mount path, not the specific token generation configuration as precisely as option A.
Concept tested: AppRole token configuration
Source: https://developer.hashicorp.com/vault/docs/auth/approle#token-configuration
Topics
Community Discussion
No community discussion yet for this question.
