VAULT-ASSOCIATE-002 · Question #86
Which of the following vault lease operations uses a lease_id as an argument? (Choose two.)
The correct answer is A. renew E. revoke. The renew and revoke lease operations in Vault both require a specific lease_id as an argument to target an individual lease.
Question
Options
- Arenew
- Brevoke -prefix
- Ccreate
- Ddescribe
- Erevoke
How the community answered
(32 responses)- A94% (30)
- B3% (1)
- C3% (1)
Why each option
The `renew` and `revoke` lease operations in Vault both require a specific `lease_id` as an argument to target an individual lease.
When renewing a secret or token, Vault requires the `lease_id` to uniquely identify the specific lease to be acted upon, using commands like `vault lease renew <lease_id>`.
`revoke -prefix` is used to revoke all leases under a given path prefix, not a single lease by its `lease_id`.
`create` is an action on a secret engine that *generates* a secret with an associated lease, not an operation that takes a `lease_id` as an argument.
`describe` is used to get information about a secret engine or a path, not to act on a specific lease identified by `lease_id`.
Similarly, to revoke a specific secret or token, the `lease_id` must be provided to the `vault lease revoke <lease_id>` command to target that individual lease.
Concept tested: Vault lease management (renew, revoke)
Source: https://developer.hashicorp.com/vault/docs/commands/lease
Topics
Community Discussion
No community discussion yet for this question.