Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HashiCorp HCVA0-003 Exam - Topic 1 Question 18 Discussion

An application is trying to use a dynamic secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?
C) Request a new secret and associated lease
A) Try the expired secret in hopes it hasn't been deleted yet
B) Perform a lease renewal
D) Request the TTL be extended for the secret lease

HashiCorp HCVA0-003 Exam - Topic 1 Question 18 Discussion

Actual exam question for HashiCorp's HCVA0-003 exam
Question #: 18
Topic #: 1
[All HCVA0-003 Questions]

An application is trying to use a dynamic secret in which the lease has expired. What can be done in order for the application to successfully request data from Vault?

Show Suggested Answer Hide Answer
Suggested Answer: C

Comprehensive and Detailed in Depth

Once a dynamic secret's lease expires, it cannot be renewed or reused; a new secret must be requested. The HashiCorp Vault documentation states: 'A lease must be renewed before it has expired. Once it has expired, it is permanently revoked and a new secret must be requested.' This means that after expiration, the secret is invalidated, and the application must obtain a new secret with a new lease to regain access.

Trying an expired secret (A) is futile as it's revoked. Performing a lease renewal (B) is impossible post-expiration, as the docs note: 'Renewal must occur before the lease expires.' Extending the TTL (D) isn't an option for an expired lease. Thus, C is the correct action.


HashiCorp Vault Documentation - Leases: Lease Renew and Revoke

Contribute your Thoughts:

0/2000 characters
Lasandra
5 days ago
I think B is the best option. Lease renewal is straightforward.
upvoted 0 times
...
Lavonne
10 days ago
Wait, can you really renew an expired lease? Sounds odd!
upvoted 0 times
...
Alonso
15 days ago
D could work, but not sure if it's allowed.
upvoted 0 times
...
Merlyn
20 days ago
A? Really? That seems risky.
upvoted 0 times
...
Flo
2 months ago
C makes sense too, just get a new one.
upvoted 0 times
...
Yvonne
2 months ago
B is the way to go, lease renewal is key!
upvoted 0 times
...
Armando
3 months ago
I wonder if extending the TTL would even be possible after expiration. Option D seems risky, but I guess it could be worth considering?
upvoted 0 times
...
Deangelo
3 months ago
I'm a bit confused about whether trying the expired secret would work. I feel like it might not be a good idea, but I can't recall the specifics.
upvoted 0 times
...
Miles
3 months ago
I remember a practice question where we had to request a new secret, so option C sounds familiar. Could that be the best approach here?
upvoted 0 times
...
Robt
4 months ago
I think we talked about lease renewals in class, so maybe option B is the right choice? But I'm not entirely sure if that's the only way.
upvoted 0 times
...

Save Cancel