nerdexam
HashiCorp

VAULT-ASSOCIATE-002 · Question #86

Which of the following vault lease operations uses a lease_id as an argument? (Choose two.)

The correct answer is A. renew E. revoke. The renew and revoke lease operations in Vault both require a specific lease_id as an argument to target an individual lease.

Submitted by andres_qro· Apr 18, 2026Operate Vault

Question

Which of the following vault lease operations uses a lease_id as an argument? (Choose two.)

Options

  • Arenew
  • Brevoke -prefix
  • Ccreate
  • Ddescribe
  • Erevoke

How the community answered

(32 responses)
  • A
    94% (30)
  • B
    3% (1)
  • C
    3% (1)

Why each option

The `renew` and `revoke` lease operations in Vault both require a specific `lease_id` as an argument to target an individual lease.

ArenewCorrect

When renewing a secret or token, Vault requires the `lease_id` to uniquely identify the specific lease to be acted upon, using commands like `vault lease renew <lease_id>`.

Brevoke -prefix

`revoke -prefix` is used to revoke all leases under a given path prefix, not a single lease by its `lease_id`.

Ccreate

`create` is an action on a secret engine that *generates* a secret with an associated lease, not an operation that takes a `lease_id` as an argument.

Ddescribe

`describe` is used to get information about a secret engine or a path, not to act on a specific lease identified by `lease_id`.

ErevokeCorrect

Similarly, to revoke a specific secret or token, the `lease_id` must be provided to the `vault lease revoke <lease_id>` command to target that individual lease.

Concept tested: Vault lease management (renew, revoke)

Source: https://developer.hashicorp.com/vault/docs/commands/lease

Topics

#Vault Leases#Lease Management#CLI Operations#Secret Lifecycles

Community Discussion

No community discussion yet for this question.

Full VAULT-ASSOCIATE-002 Practice