In the AppRole auth method, where are token policies specified for a role?

In the Vault server configuration file

In the role definition under 'token_policies'

In the secret ID generation command

In the role ID generation command

When configuring an authentication method, what does the 'max_lease_ttl' parameter control?

The maximum time a token issued by this method can be valid, regardless of renewals

The maximum number of tokens that can be issued per user

The maximum number of times a token can be renewed

The time after which a token is automatically revoked if not renewed

A CI/CD pipeline uses AppRole to authenticate. The role 'ci-role' is configured with `secret_id_ttl=0` and `token_ttl=15m`. The pipeline fetches a secret ID at startup and uses it for the entire build, which can last up to 2 hours. After 15 minutes, the pipeline's token expires and builds fail. The team wants the pipeline to authenticate successfully for the full build duration without changing the pipeline code. What should they do?

Increase the role's `token_ttl` to 2h and keep `secret_id_ttl=0`.

Create a new role with `token_ttl=0` so tokens never expire.

Set `secret_id_ttl=2h` so the secret ID lasts longer.

Set the role's `period` to 2h so the token is periodic and never expires.

HashiCorp Certified:Vault Operations Professional

Domain 1Objective 5

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Part of the Create a working Vault server configuration given a scenario domain, which makes up ~31% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

16concepts

16 Concepts in This Objective

Authentication method overview
Enable authentication methods
Configure authentication method parameters
Tune authentication method settings
Disable authentication methods
List and inspect authentication methods
Authentication method path management
Token-based authentication configuration
Userpass authentication configuration
AppRole authentication configuration
LDAP authentication configuration
Kubernetes authentication configuration
JWT/OIDC authentication configuration
TLS certificate authentication configuration
Authentication method policy association
Authentication method troubleshooting

Questions 21–25

21foundation · easy
What is the default mount path for the Kubernetes authentication method?
Select an answer first
22foundation · easy
When creating a user in the userpass auth method, which parameter assigns policies to the token issued upon login?
Select an answer first
23foundation · easy
In the AppRole auth method, where are token policies specified for a role?
Select an answer first
24foundation · easy
When configuring an authentication method, what does the 'max_lease_ttl' parameter control?
Select an answer first
25application · medium
A CI/CD pipeline uses AppRole to authenticate. The role 'ci-role' is configured with `secret_id_ttl=0` and `token_ttl=15m`. The pipeline fetches a secret ID at startup and uses it for the entire build, which can last up to 2 hours. After 15 minutes, the pipeline's token expires and builds fail. The team wants the pipeline to authenticate successfully for the full build duration without changing the pipeline code. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Enable and Configure Authentication Methods VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

What is the default mount path for the Kubernetes authentication method?

When creating a user in the userpass auth method, which parameter assigns policies to the token issued upon login?

In the AppRole auth method, where are token policies specified for a role?

When configuring an authentication method, what does the 'max_lease_ttl' parameter control?

Keep studying — Create a working Vault server configuration given a scenario