HashiCorp Certified - Vault Associate Course - Token Hierarchy

The video tutorial explains the concept of token hierarchy in Vault, focusing on the time-to-live (TTL) of tokens, the process of token revocation and renewal, and the relationship between parent and child tokens. It provides an example to illustrate how tokens are created and revoked based on their hierarchy, emphasizing that child tokens are revoked when their parent tokens are revoked, regardless of their remaining TTL.

What is the exception to the rule that each token has a TTL?

• Root tokens have no TTL by default.

• Tokens can never be renewed.

• Tokens are always manually revoked.

• All tokens have a TTL of 24 hours.

What happens when a token reaches its Max TTL?

• It is converted into a child token.

• It becomes a root token.

• It is automatically revoked by Vault.

• It can be renewed indefinitely.

How does the revocation of a parent token affect its child tokens?

• Child tokens become parent tokens.

• Child tokens gain additional TTL.

• Child tokens are also revoked.

• Child tokens remain unaffected.

In the example provided, which token is revoked first?

• The yellow token with a TTL of one hour.

• The pink token with a TTL of four hours.

• The blue token with a TTL of two hours.

• The green token with a TTL of three hours.

What happens to the blue token when the yellow token is revoked?

• The blue token is also revoked.

• The blue token's TTL is extended.

• The blue token remains unaffected.

• The blue token becomes a parent token.