VAULT-ASSOCIATE-002 · Question #42
You can use a response-wrapping token more than once for as long as it has not expired.
The correct answer is B. False. Response-wrapping tokens are designed for single use to securely transfer secrets, and expire immediately after their first successful use, regardless of their initial TTL.
Question
Options
- ATrue
- BFalse
How the community answered
(41 responses)- A12% (5)
- B88% (36)
Why each option
Response-wrapping tokens are designed for single use to securely transfer secrets, and expire immediately after their first successful use, regardless of their initial TTL.
Response-wrapping tokens cannot be used more than once; they are single-use and expire upon retrieval of the wrapped secret.
Response-wrapping tokens are designed to be single-use. Once a response-wrapping token is used to unwrap a secret, it is immediately invalidated, even if its time-to-live (TTL) has not yet expired. This mechanism ensures that the secret payload can only be retrieved once, enhancing security.
Concept tested: Vault response wrapping token usage
Source: https://developer.hashicorp.com/vault/docs/concepts/response-wrapping
Topics
Community Discussion
No community discussion yet for this question.