A Vault cluster is used to issue tokens for a large number of short-lived jobs. The cluster's storage is growing quickly, and the team wants to reduce storage usage without changing the job's behavior. What is the most effective solution?

Switch to batch tokens, which do not consume storage.

Reduce the TTL of service tokens to expire them faster.

Use a storage backend with compression.

Increase the number of Vault nodes to distribute storage.

A company runs a microservices architecture where each service needs to authenticate to Vault to fetch secrets. The services are short-lived and scale dynamically, creating a high volume of token requests. The Vault cluster is experiencing high load due to token storage and lookup operations. Which approach would best reduce the load on Vault?

Increase the number of Vault nodes to handle the load.

Use periodic service tokens to allow automatic renewal and reduce manual intervention.

Use batch tokens for service authentication, as they do not require storage or lookup on every request.

Use long-lived service tokens with a high TTL to reduce the number of token creations.

A security team is evaluating whether to use batch tokens for a service that needs to access secrets for a short period. They are concerned about the ability to revoke access immediately if the service is compromised. What should they know about batch tokens in this context?

Batch tokens can be revoked using the Vault CLI with the token revoke command.

Batch tokens cannot be revoked, so the TTL must be short to limit exposure.

Batch tokens can be revoked by revoking the parent token.

Batch tokens can be revoked individually by their token ID.

HashiCorp Certified:Vault Operations Professional

Domain 6Objective 1

Use Batch Tokens VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Part of the Scale Vault for performance domain, which makes up ~17% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 4–7 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

Questions 21–23

21application · medium
A Vault cluster is used to issue tokens for a large number of short-lived jobs. The cluster's storage is growing quickly, and the team wants to reduce storage usage without changing the job's behavior. What is the most effective solution?
Select an answer first
22application · medium
A company runs a microservices architecture where each service needs to authenticate to Vault to fetch secrets. The services are short-lived and scale dynamically, creating a high volume of token requests. The Vault cluster is experiencing high load due to token storage and lookup operations. Which approach would best reduce the load on Vault?
Select an answer first
23application · medium
A security team is evaluating whether to use batch tokens for a service that needs to access secrets for a short period. They are concerned about the ability to revoke access immediately if the service is compromised. What should they know about batch tokens in this context?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to VAULT-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “VAULT-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

Use Batch Tokens VAULT-OPERATIONS-PROFESSIONAL Practice Questions (Page 5)

Questions 21–23

A Vault cluster is used to issue tokens for a large number of short-lived jobs. The cluster's storage is growing quickly, and the team wants to reduce storage usage without changing the job's behavior. What is the most effective solution?

A security team is evaluating whether to use batch tokens for a service that needs to access secrets for a short period. They are concerned about the ability to revoke access immediately if the service is compromised. What should they know about batch tokens in this context?

Keep studying — Scale Vault for performance