A company is designing a system where thousands of external partners will receive a token to access a specific secret for a limited time. The tokens will be issued once and used a few times. The company wants to minimize the impact on Vault's performance. Which token type should they use?

Periodic tokens, because they can be used indefinitely with renewal.

Service tokens, because they can be renewed if needed.

Batch tokens, because they are stateless and reduce storage overhead.

Root tokens, because they have unrestricted access.

How does Vault validate a batch token when it is used to authenticate?

By sending the token to a third-party validation service.

By looking up the token in the storage backend.

By checking the token's cryptographic signature and TTL.

By querying the auth method that issued the token.

A policy in Vault allows creating tokens with a specific TTL. An administrator wants to ensure that batch tokens created via this policy have a maximum TTL of 5 minutes. How should they configure the policy?

Set the 'explicit_max_ttl' field in the policy to 5m.

Set the 'period' field in the policy to 5m.

Set the 'ttl' field in the policy to 5m.

Set the 'max_ttl' field in the policy to 5m.

What network overhead do batch tokens avoid compared to service tokens?

The need to contact a central token store for validation.

The need to send the token over HTTPS.

The need to use a load balancer.

The need to renew the token periodically.

A startup is launching a new feature that will issue a token to each user session. The sessions are short-lived (about 5 minutes) and the number of concurrent users is expected to be very high. The team wants to keep Vault's storage usage minimal. What should they use?

Periodic tokens with a period of 5 minutes.

Service tokens with a TTL of 5 minutes.

Batch tokens with a TTL of 5 minutes.

Root tokens with a TTL of 5 minutes.

HashiCorp Certified:Vault Operations Professional

Domain 6Objective 1

Use Batch Tokens VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Part of the Scale Vault for performance domain, which makes up ~17% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

Questions 11–15

11application · medium
A company is designing a system where thousands of external partners will receive a token to access a specific secret for a limited time. The tokens will be issued once and used a few times. The company wants to minimize the impact on Vault's performance. Which token type should they use?
Select an answer first
12foundation · medium
How does Vault validate a batch token when it is used to authenticate?
Select an answer first
13application · medium
A policy in Vault allows creating tokens with a specific TTL. An administrator wants to ensure that batch tokens created via this policy have a maximum TTL of 5 minutes. How should they configure the policy?
Select an answer first
14foundation · medium
What network overhead do batch tokens avoid compared to service tokens?
Select an answer first
15application · medium
A startup is launching a new feature that will issue a token to each user session. The sessions are short-lived (about 5 minutes) and the number of concurrent users is expected to be very high. The team wants to keep Vault's storage usage minimal. What should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.