nerdexam
HashiCorp

VAULT-ASSOCIATE-002 · Question #41

Which kind of token can be renewed indefinitely?

The correct answer is A. Periodic token. A periodic token is specifically designed to be renewed indefinitely, as long as it is renewed before its current lease expires and remains within its configured period.

Submitted by tyler.j· Apr 18, 2026Understand Vault Concepts

Question

Which kind of token can be renewed indefinitely?

Options

  • APeriodic token
  • BOrphan token
  • CUse-limit token
  • DRoot token
  • EAll of the above

How the community answered

(51 responses)
  • A
    88% (45)
  • B
    6% (3)
  • C
    2% (1)
  • D
    4% (2)

Why each option

A periodic token is specifically designed to be renewed indefinitely, as long as it is renewed before its current lease expires and remains within its configured period.

APeriodic tokenCorrect

A periodic token is specifically designed to be renewed indefinitely up to its 'period' lifetime, provided it is renewed before the current lease expires, making it suitable for long-running services that require stable access.

BOrphan token

An orphan token is a token without a parent, but its renewability and lifetime depend on its individual configuration and policy, not an inherent indefinite renewal property.

CUse-limit token

A use-limit token is configured to expire after a certain number of uses, making it impossible to renew indefinitely regardless of its time-based TTL.

DRoot token

A root token, while powerful and often having no explicit TTL, is typically managed differently and doesn't inherently fit the 'renewed indefinitely' definition in the same manner as a periodic token designed for such a lifecycle.

EAll of the above

Not all the listed token types can be renewed indefinitely; only periodic tokens are specifically designed for this behavior.

Concept tested: Vault token types and renewal

Source: https://developer.hashicorp.com/vault/docs/concepts/tokens#token-parameters

Topics

#Vault Tokens#Token Types#Periodic Tokens#Token Renewal

Community Discussion

No community discussion yet for this question.

Full VAULT-ASSOCIATE-002 Practice