Use Batch Tokens VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A developer is using a batch token to authenticate to Vault and read a secret. They notice that the token works even after the Vault server is restarted. Why is this possible?

   • ABatch tokens are validated using a cryptographic signature, so they do not depend on server state.
   • BBatch tokens are replicated across the cluster.
   • CBatch tokens are stored in the storage backend and survive restarts.
   • DBatch tokens are cached in memory and survive restarts.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An application uses a batch token to authenticate to Vault. The token was created with a TTL of 30 minutes, but the application needs to continue accessing secrets after 30 minutes. The application attempts to renew the token. What will happen?

   • AThe renewal will succeed, and the token will be extended by another 30 minutes.
   • BThe renewal will fail because batch tokens cannot be renewed.
   • CThe renewal will succeed, but the token will be converted to a service token.
   • DThe renewal will succeed only if the token has a period set.
   Reveal Solution Discussion Select an answer first
4. 8foundation · medium

   Which of the following is a limitation of batch tokens?

   • AThey cannot be used with the Vault CLI.
   • BThey cannot be renewed or revoked individually.
   • CThey are limited to a maximum TTL of 1 hour.
   • DThey cannot be used to read secrets from Vault.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is building a public API that allows clients to authenticate to Vault and retrieve a static secret. The API expects a high volume of requests, and each client will use a token for a short period. The team wants to minimize the risk of token leakage and reduce Vault's load. What is the best approach?

   • AIssue periodic tokens that can be renewed by clients.
   • BIssue service tokens with a long TTL to reduce the number of tokens.
   • CIssue root tokens to simplify access.
   • DIssue batch tokens with a short TTL to each client.
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   In which scenario are batch tokens most appropriate?

   • AA long-running application that needs to renew its token periodically.
   • BAn administrator who needs to revoke a token immediately if compromised.
   • CA high-throughput service that needs short-lived tokens for each request.
   • DA CI/CD pipeline that needs to create dynamic database credentials.
   Reveal Solution Discussion Select an answer first