VAULT-ASSOCIATE-002 · Question #61
A child token must be assigned the same or a subset the parent token's policies.
The correct answer is A. True. When creating a child token in Vault, its associated policies must be either identical to or a restrictive subset of its parent token's policies, ensuring that child tokens cannot gain more privileges than their parent.
Question
Options
- ATrue
How the community answered
(44 responses)- A100% (44)
Why each option
When creating a child token in Vault, its associated policies must be either identical to or a restrictive subset of its parent token's policies, ensuring that child tokens cannot gain more privileges than their parent.
True. In Vault's token hierarchy, child tokens inherit and are restricted by their parent's policies. This means a child token cannot be granted more permissions than its parent; its policies must be the same or a subset of the parent's policies, upholding the principle of least privilege.
Concept tested: Vault token hierarchy and policy inheritance
Source: https://developer.hashicorp.com/vault/docs/concepts/tokens#child-tokens
Topics
Community Discussion
No community discussion yet for this question.