Free HashiCorp Vault-Associate Actual Exam Questions - Question 7 Discussion

It’s B. Orphan tokens aren’t linked to their parent’s expiration, so they keep working after the parent token expires. A is about usage limits, which doesn’t capture the core idea of orphan tokens being independent of the parent token lifecycle. C can be ruled out since tokens always have policies. D is incorrect because TTL generally applies to all tokens, including orphans, so they don’t last forever regardless.

C doesn’t fit because tokens always have some policy attached. D seems off since TTL usually applies to all tokens regardless. B best matches the idea that orphan tokens outlive their parent’s expiration.

Option A makes sense because if tokens have a use limit, they’d be separate from parent tokens’ expiration rules. That might explain why they’re called orphan tokens, being more independent.

Maybe C, since orphan tokens having no policies could explain why they act independently from parent token rules, unlike what B suggests about parent expiry.

I don’t think A fits because it talks about use limits, which isn’t related to the orphan concept. The key is about parent-child token relationships, so B or D seems more on point. Could orphan tokens really ignore their own TTL completely?

B imo, orphan tokens skip parent expiry but still obey their own TTL.

Option C feels off because tokens usually have policies to define permissions, so a token with no policies might not make sense practically. Orphan tokens, by definition, are disconnected from their parent, so the focus is on the relationship with the parent token rather than policy attachment. That narrows it down to B, which fits the idea that orphan tokens don’t expire when the parent token does, making them independent in terms of lifespan.

Looks like the answer is B. Orphan tokens aren’t linked to their parent, so they don’t expire when the parent does. Makes sense for keeping tokens alive independently.