VAULT-ASSOCIATE-002 · Question #41
Which kind of token can be renewed indefinitely?
The correct answer is A. Periodic token. A periodic token is specifically designed to be renewed indefinitely, as long as it is renewed before its current lease expires and remains within its configured period.
Question
Options
- APeriodic token
- BOrphan token
- CUse-limit token
- DRoot token
- EAll of the above
How the community answered
(51 responses)- A88% (45)
- B6% (3)
- C2% (1)
- D4% (2)
Why each option
A periodic token is specifically designed to be renewed indefinitely, as long as it is renewed before its current lease expires and remains within its configured period.
A periodic token is specifically designed to be renewed indefinitely up to its 'period' lifetime, provided it is renewed before the current lease expires, making it suitable for long-running services that require stable access.
An orphan token is a token without a parent, but its renewability and lifetime depend on its individual configuration and policy, not an inherent indefinite renewal property.
A use-limit token is configured to expire after a certain number of uses, making it impossible to renew indefinitely regardless of its time-based TTL.
A root token, while powerful and often having no explicit TTL, is typically managed differently and doesn't inherently fit the 'renewed indefinitely' definition in the same manner as a periodic token designed for such a lifecycle.
Not all the listed token types can be renewed indefinitely; only periodic tokens are specifically designed for this behavior.
Concept tested: Vault token types and renewal
Source: https://developer.hashicorp.com/vault/docs/concepts/tokens#token-parameters
Topics
Community Discussion
No community discussion yet for this question.