HashiCorp Certified - Vault Associate Course - Orphan Tokens

The video tutorial explains orphan tokens, which are tokens not influenced by the token hierarchy. They do not expire when their parent token expires, but they do have a Max TTL. To create an orphan token, one needs root or pseudo privileges and must use the 'vault token create' command with the '-orphan' flag. Orphan tokens can be renewed like traditional tokens, and their status can be verified using a token lookup.

What is the primary reason for using an orphan token?

• To avoid the influence of token hierarchy

• To bypass the need for pseudo privileges

• To ensure a token expires with its parent

• To increase the Max TTL of a token

What privileges are required to create an orphan token?

• Admin privileges only

• No special privileges are needed

• User-level privileges

• Root token or pseudo privileges

How does an orphan token behave when its parent token expires?

• It requires manual renewal

• It renews automatically

• It remains unaffected

• It expires immediately

What determines the expiration of an orphan token?

• The expiration of its parent token

• The number of renewals

• The privileges of the user

• The Max TTL of the orphan token itself

Which command is used to create an orphan token?

• vault token build -orphan

• vault token create -orphan

• vault token generate -orphan

• vault token new -orphan